Lucene search
+L

3267 matches found

RubySec
RubySec
•added 2024/07/11 12:00 a.m.•53 views

Bootstrap Cross-Site Scripting (XSS) vulnerability

A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting XSS attacks. The issue is present in the carousel component, where the data-slide and data-slide-to attributes can be exploited through the href attribute of an tag due to inadequate sanitization. This...

7AI score
SaveExploits0References1Affected Software1
RubySec
RubySec
•added 2024/07/11 12:00 a.m.•74 views

Bootstrap Cross-Site Scripting (XSS) vulnerability

A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting XSS attacks. The issue is present in the carousel component, where the data-slide and data-slide-to attributes can be exploited through the href attribute of an tag due to inadequate sanitization. This...

6.8AI score
SaveExploits0References1Affected Software1
Positive Technologies
Positive Technologies
•added 2024/07/11 12:00 a.m.•17 views

PT-2024-37693

Name of the Vulnerable Software and Affected Versions Bootstrap affected versions not specified Description A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting XSS attacks. The issue is present in the carousel component, where the data-slide and data-slide-...

6.4CVSS6.7AI score
SaveExploits0References23
Positive Technologies
Positive Technologies
•added 2024/07/11 12:00 a.m.•4 views

PT-2024-42037

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS6.6AI score0.00494EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/07/11 12:00 a.m.•4 views

PT-2024-42036

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS6.6AI score0.00494EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/07/11 12:00 a.m.•4 views

PT-2024-42038

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS6.6AI score0.00494EPSS
SaveExploits0References2
CNNVD
CNNVD
•added 2024/07/11 12:00 a.m.•25 views

Number withdrawn

Bootstrap is an open source web front-end framework developed using HTML, CSS, and JavaScript by Bootstrap, Inc. This CVE number has been withdrawn...

6.3AI score
SaveExploits0References3
CNNVD
CNNVD
•added 2024/07/11 12:00 a.m.•19 views

Number withdrawn

Bootstrap is an open source web front-end framework developed using HTML, CSS, and JavaScript by Bootstrap. ch is a ClickHouse open source low-level Go client for ClickHouse. This CVE number has been withdrawn...

6.6AI score
SaveExploits0References3
osv_cve
osv_cve
•added 2024/07/09 11:15 a.m.•19 views

CVE-2024-37462

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in G5Theme Ultimate Bootstrap Elements for Elementor allows Path Traversal.This issue affects Ultimate Bootstrap Elements for Elementor: from n/a through 1.4.2...

8.8CVSS5.8AI score0.00575EPSS
SaveExploits0References1
Cvelist
Cvelist
•added 2024/07/09 10:50 a.m.•54 views

CVE-2024-37462 WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.2 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in G5Theme Ultimate Bootstrap Elements for Elementor allows Path Traversal.This issue affects Ultimate Bootstrap Elements for Elementor: from n/a through 1.4.2...

8.5CVSS0.00575EPSS
SaveExploits0References1
Vulnrichment
Vulnrichment
•added 2024/07/09 10:50 a.m.•23 views

CVE-2024-37462 WordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.2 - Local File Inclusion vulnerability

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in G5Theme Ultimate Bootstrap Elements for Elementor allows Path Traversal.This issue affects Ultimate Bootstrap Elements for Elementor: from n/a through 1.4.2...

8.5CVSS5.8AI score0.00575EPSS
SaveExploits0References1
CVE
CVE
•added 2024/07/09 10:50 a.m.•90 views

CVE-2024-37462

CVE-2024-37462 is an LFI/path traversal vulnerability in the Ultimate Bootstrap Elements for Elementor plugin. Public details identify affected software as Ultimate Bootstrap Elements for Elementor (1.0 through 1.4.2) and describe improper restriction of a pathname to a restricted directory, enab...

8.8CVSS5.8AI score0.00575EPSS
SaveExploits0References1Affected Software1
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2024/07/09 12:00 a.m.•12 views

CVE-2024-37462: Improper Limitation of a Pathname to a Restricted Directory

Improper Limitation of a Pathname to a Restricted Directory 'Path Traversal' vulnerability in G5Theme Ultimate Bootstrap Elements for Elementor allows Path Traversal.This issue affects Ultimate Bootstrap Elements for Elementor: from n/a through 1.4.2...

8.8CVSS5.9AI score0.00575EPSS
SaveExploits0References1
Positive Technologies
Positive Technologies
•added 2024/07/09 12:00 a.m.•21 views

PT-2024-27573 · Unknown · G5Theme Ultimate Bootstrap Elements For Elementor

Name of the Vulnerable Software and Affected Versions: G5Theme Ultimate Bootstrap Elements for Elementor versions n/a through 1.4.2 Description: The issue is related to an Improper Limitation of a Pathname to a Restricted Directory, also known as a 'Path Traversal' vulnerability. This allows...

8.8CVSS5.9AI score0.00575EPSS
SaveExploits0References8
CNNVD
CNNVD
•added 2024/07/09 12:00 a.m.•25 views

WordPress plugin Ultimate Bootstrap Elements for Elementor Path Traversal Vulnerability

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A path traversal...

8.8CVSS5.8AI score0.00575EPSS
SaveExploits0References2
NVD
NVD
•added 2024/07/05 2:15 p.m.•52 views

CVE-2024-6526

A vulnerability classified as problematic has been found in CodeIgniter Ecommerce-CodeIgniter-Bootstrap up to 1998845073cf433bc6c250b0354461fbd84d0e03. This affects an unknown part. The manipulation of the argument searchtitle/catName/sub/name/categorie leads to cross site scripting. It is possib...

6.1CVSS0.00519EPSS
SaveExploits1References6
Mend
Mend
•added 2024/07/05 1:31 p.m.•7 views

CVE-2024-6526

A vulnerability classified as problematic has been found in CodeIgniter Ecommerce-CodeIgniter-Bootstrap up to 1998845073cf433bc6c250b0354461fbd84d0e03. This affects an unknown part. The manipulation of the argument searchtitle/catName/sub/name/categorie leads to cross site scripting. It is possib...

6.1CVSS3.3AI score0.00519EPSS
SaveExploits1References8
CVE
CVE
•added 2024/07/05 1:31 p.m.•86 views

CVE-2024-6526

CVE-2024-6526 affects CodeIgniter Ecommerce-CodeIgniter-Bootstrap. The vulnerability arises from manipulation of the arguments search_title, catName, sub, name, and categorie, which leads to cross-site scripting (XSS). It can be exploited remotely, and public exploits/ PoC have been disclosed. A ...

6.1CVSS3.3AI score0.00519EPSS
SaveExploits1References6Affected Software1
osv_cve
osv_cve
•added 2024/07/05 1:31 p.m.•23 views

CVE-2024-6526 CodeIgniter Ecommerce-CodeIgniter-Bootstrap cross site scripting

A vulnerability classified as problematic has been found in CodeIgniter Ecommerce-CodeIgniter-Bootstrap up to 1998845073cf433bc6c250b0354461fbd84d0e03. This affects an unknown part. The manipulation of the argument searchtitle/catName/sub/name/categorie leads to cross site scripting. It is possib...

5.3CVSS3.8AI score
SaveExploits0References8
Cvelist
Cvelist
•added 2024/07/05 1:31 p.m.•58 views

CVE-2024-6526 CodeIgniter Ecommerce-CodeIgniter-Bootstrap cross site scripting

A vulnerability classified as problematic has been found in CodeIgniter Ecommerce-CodeIgniter-Bootstrap up to 1998845073cf433bc6c250b0354461fbd84d0e03. This affects an unknown part. The manipulation of the argument searchtitle/catName/sub/name/categorie leads to cross site scripting. It is possib...

5.3CVSS0.00519EPSS
SaveExploits1References6
Rows per page
Query Builder