https://patchthecve.com/CVEs with upgrade or downgrade fix stepshttps://patchthecve.com/cve/CVE-2025-34086.htmlhttps://patchthecve.com/cve/CVE-2025-34086.htmlThu, 08 Oct 2026 16:16:50 +0000HIGH 8.8: Bolt CMS versions 3.7.0 and earlier contain a chain of vulnerabilities that together allow an authenticated user to achieve remote code execution. A user with valid credentials can inject arbitrary PHP code into the displayname field of the user profile, which is rendered unsanitized in backend temphttps://patchthecve.com/cve/CVE-2024-7300.htmlhttps://patchthecve.com/cve/CVE-2024-7300.htmlWed, 17 Jun 2026 08:19:48 +0000LOW 3.5: A vulnerability classified as problematic has been found in Bolt CMS 3.7.1. Affected is an unknown function of the file /bolt/editcontent/showcases of the component Showcase Creation Handler. The manipulation of the argument title/textarea leads to cross site scripting. It is possible to launch the https://patchthecve.com/cve/CVE-2024-7299.htmlhttps://patchthecve.com/cve/CVE-2024-7299.htmlWed, 17 Jun 2026 08:19:48 +0000LOW 3.5: ** UNSUPPORTED WHEN ASSIGNED ** A vulnerability was found in Bolt CMS 3.7.1. It has been rated as problematic. This issue affects some unknown processing of the file /preview/page of the component Entry Preview Handler. The manipulation of the argument body leads to cross site scripting. The attack