CVE-2022-36532: Bolt CMS

High severity, CVSS 8.8. EPSS: 24.3% chance of exploitation in the next 30 days.

Bolt CMS contains a vulnerability in version 5.1.12 and below that allows an authenticated user with the ROLE_EDITOR privileges to upload and rename a malicious file to achieve remote code execution.

Affected products

• Bolt Bolt CMS: up to and including 5.1.12

Published 2022-09-16. Last modified 2026-07-09.