CVE-2022-36532

HighCVSS 8.8

Published: 16/09/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Very high risk

23.36%

98th percentile - higher than 98% of all known CVEs

Summary

Bolt CMS version 5.1.12 and below contains a vulnerability that allows an authenticated user with ROLE_EDITOR privileges to upload and rename a malicious file, leading to remote code execution.

Risk Assessment

An attacker can take control of the server, execute arbitrary code, and potentially access sensitive data or disrupt system operations.

Recommendation

Immediately upgrade Bolt CMS to a version newer than 5.1.12 and restrict ROLE_EDITOR user permissions to the minimum necessary.

Original NVD description (English source)

Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with the ROLE_EDITOR privileges to upload and rename a malicious file to achieve remote code execution.