Bolt CMS HTML Injection Vulnerability in TextType.php Component

A vulnerability allowing HTML injection has been identified in Bolt CMS versions prior to 3.7.5. The issue arises in the HTML Attribute Handler, specifically within the file src/Storage/Field/Type/TextType.php. By manipulating the argument style, it is possible to inject HTML. This vulnerability can be exploited remotely and has been publicly disclosed. It affects unsupported products.

Impact

Exploitation of this vulnerability allows for HTML injection, which could be used to manipulate the way content is displayed or to execute malicious scripts in the context of the user's browser.