Lucene search
+L

2938 matches found

attackerkb
attackerkb
•added 2022/05/16 3:15 p.m.•18 views

CVE-2022-1726

Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in GitHub repository wenzhixin/bootstrap-table prior to 1.20.2. Disclosing session cookies, disclosing secure session data, exfiltrating data to third-parties...

6.8CVSS5.8AI score0.0077EPSS
SaveExploits1References3
NVD
NVD
•added 2022/05/16 3:15 p.m.•19 views

CVE-2022-1726

Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in GitHub repository wenzhixin/bootstrap-table prior to 1.20.2. Disclosing session cookies, disclosing secure session data, exfiltrating data to third-parties...

6.8CVSS0.0077EPSS
SaveExploits1References2
OSV
OSV
•added 2022/05/16 3:15 p.m.•8 views

DEBIAN-CVE-2022-1726

Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in GitHub repository wenzhixin/bootstrap-table prior to 1.20.2. Disclosing session cookies, disclosing secure session data, exfiltrating data to third-parties...

5.4CVSS6.3AI score0.0077EPSS
SaveExploits1References1
Prion
Prion
•added 2022/05/16 3:15 p.m.•25 views

Design/Logic Flaw

Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in GitHub repository wenzhixin/bootstrap-table prior to 1.20.2. Disclosing session cookies, disclosing secure session data, exfiltrating data to third-parties...

3.5CVSS5.2AI score0.0077EPSS
SaveExploits1References2Affected Software1
UbuntuCve
UbuntuCve
•added 2022/05/16 3:15 p.m.•46 views

CVE-2022-1726

Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in GitHub repository wenzhixin/bootstrap-table prior to 1.20.2. Disclosing session cookies, disclosing secure session data, exfiltrating data to third-parties...

6.8CVSS6.6AI score0.0077EPSS
SaveExploits1References3
OSV
OSV
•added 2022/05/16 3:15 p.m.•12 views

UBUNTU-CVE-2022-1726

Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in GitHub repository wenzhixin/bootstrap-table prior to 1.20.2. Disclosing session cookies, disclosing secure session data, exfiltrating data to third-parties...

6.8CVSS6.5AI score0.0077EPSS
SaveExploits1References4
Mend
Mend
•added 2022/05/16 2:55 p.m.•4 views

CVE-2022-1726

Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in GitHub repository wenzhixin/bootstrap-table prior to 1.20.2. Disclosing session cookies, disclosing secure session data, exfiltrating data to third-parties...

7CVSS0.0077EPSS
SaveExploits1References6
CVE
CVE
•added 2022/05/16 2:55 p.m.•118 views

CVE-2022-1726

CVE-2022-1726 is a cross-site scripting vulnerability in the Bootstrap Table project when using the Table Export plug-in with exportOptions: htmlContent enabled, in versions prior to 1.20.2. The issue affects the Bootstrap Table code path (wenzhixin/bootstrap-table) and is disclosed as capable of...

6.8CVSS6.5AI score0.0077EPSS
SaveExploits1References2Affected Software1
Cvelist
Cvelist
•added 2022/05/16 2:55 p.m.•30 views

CVE-2022-1726 Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in wenzhixin/bootstrap-table

Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in GitHub repository wenzhixin/bootstrap-table prior to 1.20.2. Disclosing session cookies, disclosing secure session data, exfiltrating data to third-parties...

6.8CVSS5.5AI score0.0077EPSS
SaveExploits1References2
OSV
OSV
•added 2022/05/16 2:55 p.m.•16 views

CVE-2022-1726 Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in wenzhixin/bootstrap-table

Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in GitHub repository wenzhixin/bootstrap-table prior to 1.20.2. Disclosing session cookies, disclosing secure session data, exfiltrating data to third-parties...

6.8CVSS6AI score
SaveExploits0References4
Debian CVE
Debian CVE
•added 2022/05/16 2:55 p.m.•83 views

CVE-2022-1726

Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in GitHub repository wenzhixin/bootstrap-table prior to 1.20.2. Disclosing session cookies, disclosing secure session data, exfiltrating data to third-parties...

6.8CVSS0.9AI score0.0077EPSS
SaveExploits1
CNNVD
CNNVD
•added 2022/05/16 12:00 a.m.•21 views

Bootstrap-Table 跨站脚本漏洞

Bootstrap-Table is an open source extension table integrated with some of the most widely used Css frameworks by individual developers at Wenzhixin. A security vulnerability exists in Bootstrap-Table versions prior to 1.20.2. An attacker could exploit this vulnerability to disclose session cookie...

6.8CVSS6.3AI score0.0077EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2022/05/16 12:00 a.m.•2 views

PT-2022-14076

Name of the Vulnerable Software and Affected Versions bootstrap-table versions prior to 1.20.2 Description The issue allows for a XSS vulnerability with the Table Export plug-in when exportOptions: htmlContent is set to true. This can lead to disclosing session cookies, disclosing secure session...

6.8CVSS0.0077EPSS
SaveExploits1References13
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/16 12:00 a.m.•3 views

CVE-2022-1726: Improper Neutralization of Input During Web Page Generation

Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in GitHub repository wenzhixin/bootstrap-table prior to 1.20.2. Disclosing session cookies, disclosing secure session data, exfiltrating data to third-parties...

6.8CVSS6.5AI score0.0077EPSS
SaveExploits1References3
OSV
OSV
•added 2022/05/13 1:07 a.m.•42 views

GHSA-3WQF-4X89-9G79 Bootstrap vulnerable to Cross-Site Scripting (XSS)

In Bootstrap starting in version 2.3.0 and prior to 3.4.0, as well as 4.x before 4.1.2, XSS is possible in the collapse data-parent attribute...

6.1CVSS6.8AI score0.04135EPSS
SaveExploits1References28
vulnersOsv
vulnersOsv
•added 2022/05/13 1:07 a.m.•4 views

@7ninjas/scss-mixins (>=0.0.0, <=1.0.0-alpha3), @afiniti/design-system (>=0.0.1, <=0.0.8) +557 more potentially affected by CVE-2018-14040 via bootstrap (>=4.0.0, <=4.1.1)

bootstrap NPM version =4.0.0, =0.0.0, =0.0.1, =0.0.1, =0.0.1, =0.0.1, =2.0.0-alpha.1, =0.0.1-1.alpha, =0.0.1, =1.1.0, =0.1.0, =1.0.0, =0.3.0, =1.0.0, =2.0.0, =1.0.0, =1.0.31 and more Source cves: CVE-2018-14040 Source advisory: OSV:GHSA-3WQF-4X89-9G79...

6.1CVSS6.8AI score0.04135EPSS
SaveExploits1
vulnersOsv
vulnersOsv
•added 2022/05/13 1:07 a.m.•4 views

@ajoursystem/arnisp-bootstrap-xlgrid (1.0.0), @arivazhagan/demo-project (1.0.1) +453 more potentially affected by CVE-2018-14040 via bootstrap (>=3.1.1, <=3.3.7)

bootstrap NPM version =3.1.1, =1.31.0-SNAPSHOT, =0.0.1, =0.0.1, =4.0.8, =1.0.0, =1.0.0, =0.0.0, =0.0.2 and more Source cves: CVE-2018-14040 Source advisory: OSV:GHSA-3WQF-4X89-9G79...

6.1CVSS6.8AI score0.04135EPSS
SaveExploits1
Github Security Blog
Github Security Blog
•added 2022/05/13 1:07 a.m.•419 views

Bootstrap vulnerable to Cross-Site Scripting (XSS)

In Bootstrap starting in version 2.3.0 and prior to 3.4.0, as well as 4.x before 4.1.2, XSS is possible in the collapse data-parent attribute...

6.1CVSS6.8AI score0.04135EPSS
SaveExploits1References29Affected Software5
RubySec
RubySec
•added 2022/05/13 12:00 a.m.•31 views

Bootstrap vulnerable to Cross-Site Scripting (XSS)

In Bootstrap starting in version 2.3.0 and prior to 3.4.0, as well as 4.x before 4.1.2, XSS is possible in the collapse data-parent attribute...

6.1CVSS6.8AI score0.04135EPSS
SaveExploits1References1Affected Software1
CNVD
CNVD
•added 2022/05/09 12:00 a.m.•64 views

Jfinal CMS Command Injection Vulnerability

Jfinal CMS is a powerful information consulting website developed in java, using the simple and powerful JFinal as a web framework, template engine with beetl, database with mysql, front-end bootstrap framework. jfinal CMS version 5.0.1 has a command injection vulnerability, which originates from...

7.5CVSS4.5AI score0.02173EPSS
SaveExploits1Affected Software1
Rows per page
Query Builder