Lucene search
+L

2931 matches found

Positive Technologies
Positive Technologies
•added 2024/07/11 12:00 a.m.•3 views

PT-2024-42040

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS0.00494EPSS
SaveExploits0References2
RubySec
RubySec
•added 2024/07/11 12:00 a.m.•42 views

Bootstrap Cross-Site Scripting (XSS) vulnerability

A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting XSS attacks. The issue is present in the carousel component, where the data-slide and data-slide-to attributes can be exploited through the href attribute of an tag due to inadequate sanitization. This...

6.2AI score
SaveExploits0References1
RubySec
RubySec
•added 2024/07/11 12:00 a.m.•48 views

Bootstrap Cross-Site Scripting (XSS) vulnerability

A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting XSS attacks. The issue is present in the carousel component, where the data-slide and data-slide-to attributes can be exploited through the href attribute of an tag due to inadequate sanitization. This...

6.2AI score
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/07/11 12:00 a.m.•15 views

PT-2024-37693

Name of the Vulnerable Software and Affected Versions Bootstrap affected versions not specified Description A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting XSS attacks. The issue is present in the carousel component, where the data-slide and data-slide-...

6.4CVSS7AI score
SaveExploits0References23
CNNVD
CNNVD
•added 2024/07/11 12:00 a.m.•22 views

Number withdrawn

Bootstrap is an open source web front-end framework developed using HTML, CSS, and JavaScript by Bootstrap, Inc. This CVE number has been withdrawn...

6.9AI score
SaveExploits0References3
RubySec
RubySec
•added 2024/07/11 12:00 a.m.•68 views

Bootstrap Cross-Site Scripting (XSS) vulnerability

A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting XSS attacks. The issue is present in the carousel component, where the data-slide and data-slide-to attributes can be exploited through the href attribute of an tag due to inadequate sanitization. This...

6.2AI score
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/11 12:00 a.m.•3 views

CVE-2024-6485: Improper Neutralization of Input During Web Page Generation

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS6.4AI score0.00494EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/07/11 12:00 a.m.•8 views

Bootstrap Security Vulnerabilities

Bootstrap is an open source web front-end framework developed using HTML, CSS and JavaScript by Bootstrap Inc. A security vulnerability exists in Bootstrap version 3.4.5, which stems from susceptibility to cross-site scripting XSS attacks, which can lead to the injection of malicious scripts and...

6.4CVSS6.1AI score0.00494EPSS
SaveExploits0References3
OSV
OSV
•added 2024/07/09 11:15 a.m.•16 views

CVE-2024-37462

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in G5Theme Ultimate Bootstrap Elements for Elementor allows Path Traversal.This issue affects Ultimate Bootstrap Elements for Elementor: from n/a through 1.4.2...

8.8CVSS5.8AI score0.00575EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/09 10:50 a.m.•23 views

CVE-2024-37462 WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.2 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in G5Theme Ultimate Bootstrap Elements for Elementor allows Path Traversal.This issue affects Ultimate Bootstrap Elements for Elementor: from n/a through 1.4.2...

8.5CVSS6.9AI score0.00575EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/07/09 10:50 a.m.•52 views

CVE-2024-37462 WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.2 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in G5Theme Ultimate Bootstrap Elements for Elementor allows Path Traversal.This issue affects Ultimate Bootstrap Elements for Elementor: from n/a through 1.4.2...

8.5CVSS0.00575EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/09 10:50 a.m.•86 views

CVE-2024-37462

CVE-2024-37462 is an LFI/path traversal vulnerability in the Ultimate Bootstrap Elements for Elementor plugin. Public details identify affected software as Ultimate Bootstrap Elements for Elementor (1.0 through 1.4.2) and describe improper restriction of a pathname to a restricted directory, enab...

8.8CVSS8.7AI score0.00575EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/09 12:00 a.m.•10 views

CVE-2024-37462: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in G5Theme Ultimate Bootstrap Elements for Elementor allows Path Traversal.This issue affects Ultimate Bootstrap Elements for Elementor: from n/a through 1.4.2...

8.8CVSS5.8AI score0.00575EPSS
SaveExploits0References1
CNNVD
CNNVD
•added 2024/07/09 12:00 a.m.•22 views

WordPress plugin Ultimate Bootstrap Elements for Elementor Path Traversal Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

8.8CVSS6.8AI score0.00575EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/07/09 12:00 a.m.•19 views

PT-2024-27573 · Unknown · G5Theme Ultimate Bootstrap Elements For Elementor

Name of the Vulnerable Software and Affected Versions: G5Theme Ultimate Bootstrap Elements for Elementor versions n/a through 1.4.2 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability. This allows...

8.8CVSS6.8AI score0.00575EPSS
SaveExploits0References8
NVD
NVD
•added 2024/07/05 2:15 p.m.•47 views

CVE-2024-6526

A vulnerability classified as problematic has been found in CodeIgniter Ecommerce-CodeIgniter-Bootstrap up to 1998845073cf433bc6c250b0354461fbd84d0e03. This affects an unknown part. The manipulation of the argument searchtitle/catName/sub/name/categorie leads to cross site scripting. It is possib...

6.1CVSS0.00519EPSS
SaveExploits1References6
Cvelist
Cvelist
•added 2024/07/05 1:31 p.m.•55 views

CVE-2024-6526 CodeIgniter Ecommerce-CodeIgniter-Bootstrap cross site scripting

A vulnerability classified as problematic has been found in CodeIgniter Ecommerce-CodeIgniter-Bootstrap up to 1998845073cf433bc6c250b0354461fbd84d0e03. This affects an unknown part. The manipulation of the argument searchtitle/catName/sub/name/categorie leads to cross site scripting. It is possib...

5.3CVSS0.00519EPSS
SaveExploits1References6
Mend
Mend
•added 2024/07/05 1:31 p.m.•2 views

CVE-2024-6526

A vulnerability classified as problematic has been found in CodeIgniter Ecommerce-CodeIgniter-Bootstrap up to 1998845073cf433bc6c250b0354461fbd84d0e03. This affects an unknown part. The manipulation of the argument searchtitle/catName/sub/name/categorie leads to cross site scripting. It is possib...

6.1CVSS0.00519EPSS
SaveExploits1References8
OSV
OSV
•added 2024/07/05 1:31 p.m.•12 views

CVE-2024-6526 CodeIgniter Ecommerce-CodeIgniter-Bootstrap cross site scripting

A vulnerability classified as problematic has been found in CodeIgniter Ecommerce-CodeIgniter-Bootstrap up to 1998845073cf433bc6c250b0354461fbd84d0e03. This affects an unknown part. The manipulation of the argument searchtitle/catName/sub/name/categorie leads to cross site scripting. It is possib...

5.3CVSS3.8AI score
SaveExploits0References8
CVE
CVE
•added 2024/07/05 1:31 p.m.•80 views

CVE-2024-6526

CVE-2024-6526 affects CodeIgniter Ecommerce-CodeIgniter-Bootstrap. The vulnerability arises from manipulation of the arguments search_title, catName, sub, name, and categorie, which leads to cross-site scripting (XSS). It can be exploited remotely, and public exploits/ PoC have been disclosed. A ...

6.1CVSS4.5AI score0.00519EPSS
SaveExploits1References6Affected Software1
Rows per page
Query Builder