CVE-2022-36532

High · 8.8

CVSS

8.8

EPSS

24.3%

Published

Sep 16, 2022

CISA due date

—

The record

Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with the ROLE_EDITOR privileges to upload and rename a malicious file to achieve remote code execution.

Affected packages

Ecosystem	Package	Introduced	Fixed