Skip to content
BBolt
Products
| Product | CVEs | Exploited | Latest |
|---|
| CMS | 4 | – | Jun 8, 2026 |
| bolt | 2 | – | Jun 8, 2020 |
| core | 1 | – | Aug 5, 2026 |
Exploited and recent CVEs
-
CVE-2026-71291
High 8.8
Bolt CMS Server-Side Template Injection via Unsandboxed allow_twig Field Rendering
0.5%
-
CVE-2026-11511
Low 3.5
Bolt CMS HTML Attribute TextType.php HTML injection
0.2%
-
CVE-2025-34086
High 7.5
Bolt CMS Authenticated Remote Code Execution via Profile Injection and File Rename
4.3%
-
CVE-2024-7300
Low 3.5
Bolt CMS Showcase Creation showcases cross site scripting
0.4%
-
CVE-2024-7299
Low 3.5
Bolt CMS Entry Preview page cross site scripting
0.4%
-
CVE-2020-4041
High 7.4
The filename of uploaded files vulnerable to stored XSS in Bolt CMS
2.1%
-
CVE-2020-4040
High 8.6
CSRF issue on preview pages in Bolt CMS
1.8%