CVE-2022-36532
HIGH 8.8EPSS 24.3%
Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with the ROLE_EDITOR privileges to upload and rename a malicious file to achieve remote code execution.
- CVSS v3.1 NVD
- 8.8 HIGH
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H - EPSS
- 24.31% chance of exploitation in the next 30 days, 98th percentile
- Published
- 2022-09-16
- Updated
- 2026-07-09