Userxmirandax

**Name of the Vulnerable Software and Affected Versions** Bolt CMS version 3.7.1 **Description** A vulnerability was found in the Entry Preview Handler component, affecting the processing of the file /preview/page. The manipulation of the `body` argument leads to cross-site scripting. The attack can be initiated remotely. This issue only affects products that are no longer supported by the maintainer. **Recommendations** As a temporary workaround, consider disabling the Entry Preview Handler component until a patch is available. Restrict access to the /preview/page file to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.