https-nj.gov---CVE-2018-14040

https-nj.gov---CVE-2018-14040 新泽西州官方网站漏洞报告 在 Bootstrap 4.1.2 之前的版本中，主要的 collapse 数据属性存在 XSS 风险。 data-target 属性和 data-parent 属性容易受到跨站脚本（Cross-Site Scripting）攻击。 Test 修复建议 针对此特定问题的修复方法可以是修改 getTargetFromTrigger 函数： return $target 改为： return $document.querySelectortarget 但似乎其他地方也存在同样的问题。 以下是另一个示例：...

Security Bulletin: Cross-Site Scripting (XSS) Vulnerability in data-target Attribute Handling in Bootstrap, affects watsonx.data

Summary A Cross-Site Scripting XSS vulnerability in Bootstrap versions before 3.4.0 and 4.0.0-beta.2 allows attackers to inject malicious code via the data-target attribute due to improper input handling. This can affect watsonx.data. Vulnerability Details CVEID:CVE-2016-10735 DESCRIPTION: In...

bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...

bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...

bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...

AZL-43750 CVE-2018-14040 affecting package python-openstackdocstheme 1.29.0-8

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...

CVE-2018-14040: Improper Neutralization of Input During Web Page Generation

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...