https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-06T23:05:53.290183+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2026-39229 fkie_cve-2026-39229 2026-11-06T23:05:53.308869+00:00

Bolt CMS through 3.7.0 allows SQL Injection in the 'order' parameter of the content listing pages. An authenticated attacker with low-level privileges can exploit this through the OrderDirective component. This allows for the extraction of sensitive information

 https://db.gcve.eu/vuln/ghsa-j85r-p3j3-xxp2 GHSA-j85r-p3j3-xxp2 2026-11-06T23:05:53.308935+00:00

Bolt CMS through 3.7.0 allows SQL Injection in the 'order' parameter of the content listing pages. An authenticated attacker with low-level privileges can exploit this through the OrderDirective component. This allows for the extraction of sensitive information