This exploit demonstrates a CSRF vulnerability in Bolt CMS 3.6.10, leading to XSS and potential RCE via file upload and manipulation. It uses XMLHttpRequest to perform unauthorized actions on behalf of an authenticated user.
Classification
Working Poc 90%
Attack Type
Xss
Complexity
Moderate
Reliability
Reliable
Target:Bolt CMS 3.6.10
Auth required
Prerequisites:Authenticated user session · Access to the target Bolt CMS instance