Bolt before 3.6.10 has XSS via a title that is mishandled in the system log.Referenceshttps://github.com/bolt/bolt/releases/tag/v3.6.10https://github.com/bolt/bolt/pull/7802