Bolt · Bolt Cms · CVE-2017-11128
**Name of the Vulnerable Software and Affected Versions**
Bolt CMS version 3.2.14
**Description**
The issue allows stored XSS via text input, as demonstrated by the Title field of a New Entry. This can be exploited by injecting malicious code into the text input fields.
**Recommendations**
For Bolt CMS version 3.2.14, update to a version that contains a fix for this issue. As a temporary workaround, consider restricting access to the text input fields, such as the Title field of a New Entry, to minimize the risk of exploitation. Avoid using the `title` field in the affected entry creation process until the issue is resolved.