PT-2020-15937

Name of the Vulnerable Software and Affected Versions Ecommerce-CodeIgniter-Bootstrap versions prior to 2020-08-03 Description The issue allows for XSS in a specific file, application/modules/admin/views/ecommerce/discounts.php. Recommendations For versions prior to 2020-08-03, update to a versio...

PT-2020-15940

Name of the Vulnerable Software and Affected Versions Ecommerce-CodeIgniter-Bootstrap versions prior to 2020-08-03 Description The issue allows for XSS in certain PHP files, specifically within the application/views/templates/clothesshop, application/views/templates/greenlabel, and...

PT-2020-10876 · Twitter · Bootstrap-Select

Name of the Vulnerable Software and Affected Versions: bootstrap-select versions prior to 1.13.6 Description: The issue allows Cross-Site Scripting XSS due to the failure to escape title values in OPTION elements. This may enable attackers to execute arbitrary JavaScript in a victim's browser...

CVE-2020-25091: Improper Neutralization of Input During Web Page Generation

Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/vendor/views/addproduct.php...

PT-2020-15939

Name of the Vulnerable Software and Affected Versions Ecommerce-CodeIgniter-Bootstrap versions prior to 2020-08-03 Description The issue allows for XSS in the application/modules/vendor/views/add product.php file. Recommendations For versions prior to 2020-08-03, update to a version released afte...

CVE-2020-25089: Improper Neutralization of Input During Web Page Generation

Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/ecommerce/discounts.php...

PT-2020-15941

Name of the Vulnerable Software and Affected Versions Ecommerce-CodeIgniter-Bootstrap versions prior to 2020-08-03 Description The issue allows for XSS in certain templates. Specifically, it affects the blog.php file within the application/views/templates/clothesshop,...

CVE-2020-25090: Improper Neutralization of Input During Web Page Generation

Ecommerce-CodeIgniter-Bootstrap before 2020-08-03 allows XSS in application/modules/admin/views/ecommerce/publish.php...

PT-2020-15938

Name of the Vulnerable Software and Affected Versions Ecommerce-CodeIgniter-Bootstrap versions prior to 2020-08-03 Description The issue allows for XSS in the application/modules/admin/views/ecommerce/publish.php file. Recommendations For versions prior to 2020-08-03, update to a version released...

PT-2020-15936

Name of the Vulnerable Software and Affected Versions Ecommerce-CodeIgniter-Bootstrap versions prior to 2020-08-03 Description The issue allows for XSS in a specific file, application/modules/admin/views/blog/blogpublish.php. Recommendations For versions prior to 2020-08-03, update to a version...

PT-2020-15935

Name of the Vulnerable Software and Affected Versions Ecommerce-CodeIgniter-Bootstrap versions prior to 2020-08-03 Description The issue allows for XSS in the application/modules/admin/views/advanced settings/languages.php file. Recommendations For versions prior to 2020-08-03, update to a versio...

GHSA-C7PP-X73H-4M2V Cross-Site Scripting in bootstrap-vue

Versions of bootstrap-vue prior to 2.0.0-rc.12 are vulnerable to Cross-Site Scripting. Due to insufficient input sanitization, components may be vulnerable to Cross-Site Scripting through the options variable. This may lead to the execution of malicious JavaScript on the user's browser...

@jojocoders/jojonomic-ui (>=1.0.191, <=2.0.174), mayank-apps (1.1.0) +2 more potentially affected by unknown CVE via bootstrap-vue (>=2.0.0-rc.1, <=2.0.0-rc.9)

bootstrap-vue NPM version =2.0.0-rc.1, =1.0.191, =0.0.2, =0.0.10 Source cves: unknown CVE Source advisory: OSV:GHSA-C7PP-X73H-4M2V...

Cross-Site Scripting in bootstrap-vue

Versions of bootstrap-vue prior to 2.0.0-rc.12 are vulnerable to Cross-Site Scripting. Due to insufficient input sanitization, components may be vulnerable to Cross-Site Scripting through the options variable. This may lead to the execution of malicious JavaScript on the user's browser...

@jojocoders/jojonomic-ui (>=1.0.191, <=2.0.174), mayank-apps (1.1.0) +2 more potentially affected by unknown CVE via bootstrap-vue (>=2.0.0-rc.1, <=2.0.0-rc.9)

bootstrap-vue NPM version =2.0.0-rc.1, =1.0.191, =0.0.2, =0.0.10 Source cves: unknown CVE Source advisory: GHSA-C7PP-X73H-4M2V...

PT-2020-21231

Name of the Vulnerable Software and Affected Versions bootstrap-vue versions prior to 2.0.0-rc.12 Description The issue is related to insufficient input sanitization, making components vulnerable to Cross-Site Scripting through the options variable. This may lead to the execution of malicious...

@corex/argon-theme (>=1.1.1, <=1.1.33), @creative-tim-official/argon-dashboard-free (1.2.0) +14 more potentially affected by CVE-2016-1000227 via bootstrap-tagsinput (0.7.1)

bootstrap-tagsinput NPM version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap-tagsinput and may be impacted: - @corex/argon-theme =1.1.1, =0.27.0-rc1, =0.0.1, =0.1.0, =3.0.0, =1.2.0, =0.1.0, =0.2.0, =0.1.1, =1.2.6, =1.4.0, =0.1.89,...

@corex/argon-theme (>=1.1.1, <=1.1.33), @creative-tim-official/argon-dashboard-free (1.2.0) +14 more potentially affected by CVE-2016-1000227 via bootstrap-tagsinput (0.7.1)

bootstrap-tagsinput NPM version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap-tagsinput and may be impacted: - @corex/argon-theme =1.1.1, =0.27.0-rc1, =0.0.1, =0.1.0, =3.0.0, =1.2.0, =0.1.0, =0.2.0, =0.1.1, =1.2.6, =1.4.0, =0.1.89,...

Cross-Site Scripting in bootstrap-tagsinput

All versions of bootstrap-tagsinput are vulnerable to cross-site scripting when user input is passed into the itemTitle parameter unmodified, as the package fails to properly sanitize or encode user input for that parameter. Recommendation This package is not actively maintained, and has not seen...

GHSA-V2JQ-9475-R5G8 Cross-Site Scripting in bootstrap-tagsinput

All versions of bootstrap-tagsinput are vulnerable to cross-site scripting when user input is passed into the itemTitle parameter unmodified, as the package fails to properly sanitize or encode user input for that parameter. Recommendation This package is not actively maintained, and has not seen...