Bolt CMS

• CVE-2026-11511 Low 3.5 Bolt CMS HTML Attribute TextType.php HTML injection 0.2%
• CVE-2025-34086 High 7.5 Bolt CMS Authenticated Remote Code Execution via Profile Injection and File Rename 4.3%
• CVE-2024-7300 Low 3.5 Bolt CMS Showcase Creation showcases cross site scripting 0.4%
• CVE-2024-7299 Low 3.5 Bolt CMS Entry Preview page cross site scripting 0.4%