Kotatubot

**Name of the Vulnerable Software and Affected Versions** Bolt versions prior to 3.6.10 **Description** The issue arises from mishandling a title in the system log, leading to a potential XSS attack. **Recommendations** For versions prior to 3.6.10, update to version 3.6.10 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Bolt versions prior to 3.6.10 **Description** The issue allows for XSS attacks through an image's alt or title field. **Recommendations** For versions prior to 3.6.10, update to version 3.6.10 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Bolt versions prior to 3.6.10 **Description** The issue is related to cross-site scripting (XSS) that can occur via the createFolder or createFile functions in the Controller/Async/FilesystemManager.php file. **Recommendations** For versions prior to 3.6.10, update to version 3.6.10 or later to resolve the issue.