CVE-2025-1647

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Bootstrap allows Cross-Site Scripting XSS.This issue affects Bootstrap: from 3.4.1 before 4.0.0...

UBUNTU-CVE-2025-1647

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Bootstrap allows Cross-Site Scripting XSS.This issue affects Bootstrap: from 3.4.1 before 4.0.0...

cn.jbone:jbone-ui (=1.0.0), io.springlets:springlets-boot-starter-web (>=1.2.0.RC2 <=1.2.0.RELEASE) +56 more potentially affected by CVE-2025-1647 via org.webjars.bower:bootstrap (>=3.4.1 <=4.0.0-beta.3)

org.webjars.bower:bootstrap MAVEN version =3.4.1, =1.2.0.RC2, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.0, =0.5.1 and more Source cves: CVE-2025-1647 Source advisory: SNYK:JAVA-ORGWEBJARSBOWER-10176070...

com.adrianhurt:play-bootstrap_2.10 (>=1.0-P24-B4 <=1.1.1-P24-B4), com.adrianhurt:play-bootstrap_2.11 (>=1.0-P24-B4 <=1.1.1-P25-B4) +44 more potentially affected by CVE-2025-1647 via org.webjars:bootstrap (>=3.4.1 <=4.0.0-2)

org.webjars:bootstrap MAVEN version =3.4.1, =1.0-P24-B4, =1.0-P24-B4, =2.3.2.RELEASE, =2.3.2.RELEASE, =2.3.2.RELEASE, =2.3.2.RELEASE, =2.3.2.RELEASE, =2.3.2.RELEASE, =2.3.8.RELEASE, =4.2.11, =2.5.0, =2.5.4 and more Source cves: CVE-2025-1647 Source advisory: SNYK:JAVA-ORGWEBJARS-10176068...

org.activecomponents.jadex:jadex-distribution-standard (>=4.0.244 <=4.0.267), org.activecomponents.jadex:jadex-tools-runtimetools-web (>=4.0.244 <=4.0.267) +11 more potentially affected by CVE-2025-1647 via org.webjars.bowergithub.twbs:bootstrap (>=3.4.1 <=4.0.0-beta.3)

org.webjars.bowergithub.twbs:bootstrap MAVEN version =3.4.1, =4.0.244, =4.0.244, =2.4.0, =1.3.0, =1.3.1 Source cves: CVE-2025-1647 Source advisory: SNYK:JAVA-ORGWEBJARSBOWERGITHUBTWBS-10176069...

CVE-2025-1647 XSS in Bootstrap title attribute for Tooltip and Popover

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Bootstrap allows Cross-Site Scripting XSS.This issue affects Bootstrap: from 3.4.1 before 4.0.0...

CVE-2025-1647 XSS in Bootstrap title attribute for Tooltip and Popover

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Bootstrap allows Cross-Site Scripting XSS.This issue affects Bootstrap: from 3.4.1 before 4.0.0...

CVE-2025-1647

Improper Neutralization of Input During Web Page Generation XSS or 'Cross-site Scripting' vulnerability in Bootstrap allows Cross-Site Scripting XSS.This issue affects Bootstrap: from 3.4.1 before 4.0.0...

PT-2025-21333

Name of the Vulnerable Software and Affected Versions: Bootstrap versions 3.4.1 through 3.4.x Description: The issue is related to Improper Neutralization of Input During Web Page Generation, also known as Cross-site Scripting XSS. This allows attackers to run malicious scripts. A DOM-based XSS...

CVE-2025-20155

A vulnerability in the bootstrap loading of Cisco IOS XE Software could allow an authenticated, local attacker to write arbitrary files to an affected system. This vulnerability is due to insufficient input validation of the bootstrap file that is read by the system software when a device is firs...

Debian dla-4125 : libjs-bootstrap4 - security update

The remote Debian 11 host has a package installed that is affected by a vulnerability as referenced in the dla-4125 advisory. - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4125-1 [email protected] https://www.debian.org/lts/security/...

Security Bulletin: Vulnerability in Bootstrap (CVE-2024-6531) affects Power HMC.

Summary The Bootstrap library is used by Power Hardware Management Console HMC. HMC has addressed the applicable CVE. Vulnerability Details CVEID:CVE-2024-6531 DESCRIPTION: Node.js Bootstrap module is vulnerable to cross-site scripting, caused by improper validation of user-supplied input by the...

Linux Distros Unpatched Vulnerability : CVE-2016-10735

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041...

CVE-2024-6485

A vulnerability was found in bootstrap associated with the data-loading-text attribute within the button plugin. This vulnerability allows malicious JavaScript code to be injected into the attribute, which is then executed when the button's loading state is triggered...

01.webpack-study (=1.0.0), 0226 (=1.0.0) +3323 more potentially affected by CVE-2024-6485 via bootstrap (>=3.1.1 <=3.4.1)

bootstrap NPM version =3.1.1, =0.1.0, =4.13.7-rc4, =3.0.1, =3.0.4, =0.0.0-ad-beta.1, =0.0.0-aj-alpha.9, =0.0.2, =0.3.6, =0.4.35 and more Source cves: CVE-2024-6485 Source advisory: OSV:GHSA-VXMC-5X29-H64V...

PT-2024-37660

Name of the Vulnerable Software and Affected Versions bootstrap affected versions not specified Description A security issue has been discovered that could enable Cross-Site Scripting XSS attacks. The issue is associated with the data-loading-text attribute within the button plugin. This can be...

PT-2024-37659

Name of the Vulnerable Software and Affected Versions Bootstrap affected versions not specified Description A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting XSS attacks. The issue is present in the carousel component, where the data-slide and data-slide-...

PT-2024-37693

Name of the Vulnerable Software and Affected Versions Bootstrap affected versions not specified Description A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting XSS attacks. The issue is present in the carousel component, where the data-slide and data-slide-...

bootstrap: Cross-site Scripting (XSS) in the data-target property of scrollspy

A flaw was found in Bootstrap, where it is vulnerable to Cross-site scripting, caused by improper validation of user-supplied input by the data-target property of scrollspy. This flaw allows a remote attacker to execute a script in a victim's Web browser within the security context of the hosting...

F5 Networks BIG-IP : Bootstrap vulnerability (K000133673)

The version of F5 Networks BIG-IP installed on the remote host is prior to 13.1.3.3 / 14.1.2.4 / 15.1.0 / 17.1.0. It is, therefore, affected by a vulnerability as referenced in the K000133673 advisory. - In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the...