Getbootstrap - vulnerabilities (CVEs)

9 CVEs in 2 products, 0 in the last 30 days, newest from 2024-07-11.

Products

CVE-2024-6485 - CVSS 6.4 (medium), 2024-07-11: A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the…
CVE-2019-10842 - CVSS 9.8 (critical), 2019-04-04: Arbitrary code execution (via backdoor code) was discovered in bootstrap-sass 3.2.0.3, when downloaded from rubygems.org. An unauthenticated attacker can…
CVE-2019-8331 - CVSS 6.1 (medium), 2019-02-20: In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
CVE-2018-20677 - CVSS 6.1 (medium), 2019-01-09: In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.
CVE-2018-20676 - CVSS 6.1 (medium), 2019-01-09: In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.
CVE-2016-10735 - CVSS 6.1 (medium), 2019-01-09: In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.
CVE-2018-14040 - CVSS 6.1 (medium), 2018-07-13: In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.
CVE-2018-14042 - CVSS 6.1 (medium), 2018-07-13: In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
CVE-2018-14041 - CVSS 6.1 (medium), 2018-07-13: In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.