Cross-site Scripting (XSS)

bootstrap is vulnerable to Cross-site Scripting XSS. The attack exists because it does not escape the data-template, data-content and data-title options for tooltip/popover plugins, allowing to inject malicious script through it...

@ajoursystem/arnisp-bootstrap-xlgrid (1.0.0), @arivazhagan/demo-project (1.0.1) +453 more potentially affected by CVE-2018-14042 via bootstrap (>=3.1.1, <=3.3.7)

bootstrap NPM version =3.1.1, =1.31.0-SNAPSHOT, =0.0.1, =0.0.1, =4.0.8, =1.0.0, =1.0.0, =0.0.0, =0.0.2 and more Source cves: CVE-2018-14042 Source advisory: OSV:GHSA-7MVR-5X2G-WFC8...