Cpe:2.3:a:bolt:bolt_cms:*:*:*:*:*:*:*:*

A public exploit PoC has been published for CVE-2022-36532, an authenticated remote code execution vulnerability in Bolt CMS versions 5.1.12 and earlier. The vulnerability involves improper file extension enforcement and parameter confusion during file rename operations.