PT-2026-27273 · Bolo Blog · Bolo-Blog

Lastxuan · CVE-2026-4616 · Published 2026-03-24 · Updated 2026-03-24

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:N/AC:L/Au:M/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions bolo-blog version 2.6.4

Description A security issue exists in bolo-blog 2.6.4. The affected element is a function within the file /console/article/ of the Article Title Handler component. Manipulating the articleTitle argument can lead to cross site scripting. This attack can be initiated remotely. An exploit for this issue has been publicly released. The project was notified of the problem through an issue report but has not yet responded.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2026-4616

Affected Products

Bolo-Blog

References · 8

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/4xxx/CVE-2026-4616.json · Exploit
• 🔥 https://github.com/bolo-blog/bolo-solo/issues/330#issue-4045018183 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2026-4616 · Security Note
• https://osv.dev/vulnerability/CVE-2026-4616 · Vendor Advisory
• https://github.com/bolo-blog/bolo-solo/issues/330 · Note
• https://vuldb.com/?id.352480 · Note
• https://vuldb.com/?ctiid.352480 · Note
• https://vuldb.com/?submit.775742 · Note