Threats tagged 'ghsa-vrmq-3jgw-7gqj'

Bootstrap CMS version 0.9.0-alpha contains a code injection vulnerability in the Page Creation Handler component, specifically in the file resources/views/pages/show.blade.php. This vulnerability allows remote attackers with low privileges to manipulate the 'body' argument to inject code. The vulnerability affects an unsupported and unmaintained version of the product. Public exploit code exists, but there is no indication of active exploitation in the wild.