CVE-2024-7300

Summary

CVE-2024-7300 is a recently disclosed cross-site scripting (XSS) vulnerability in Bolt CMS 3.7.1. Affected is an unnamed function within the Showcase Creation Handler's /bolt/editcontent/showcases file. By manipulating the title/textarea argument, an attacker can inject malicious scripts, potentially gaining unauthorized access to user sessions. The vulnerability can be exploited remotely, and its existence and exploit have been made public. Important to note, this vulnerability only impacts unsupported versions of Bolt CMS, as confirmed by the vendor.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.