CVE-2018-20677

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property...

CVE-2018-20676

In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute...

CVE-2018-20676

CVE-2018-20676 affects Bootstrap 3.x up to 3.4.0, where XSS is possible via the tooltip data-viewport attribute due to unsafe handling of input. Affected component: tooltip data-viewport. Impact stated: cross-site scripting with potential partial integrity impact; no exploitation details provided...

CVE-2018-20677

Bootstrap before 3.4.0 is vulnerable to cross-site scripting via the affix configuration target property due to improper handling of input in that attribute. The issue enables XSS in the affected component, and the condition is described as existing in Bootstrap 3.x prior to 3.4.0. Public referen...

@ajoursystem/arnisp-bootstrap-xlgrid (1.0.0), @arivazhagan/demo-project (1.0.1) +456 more potentially affected by CVE-2018-20677 via bootstrap (>=0.0.2, <=3.3.7)

bootstrap NPM version =0.0.2, =1.31.0-SNAPSHOT, =0.0.1, =0.0.1, =4.0.8, =1.0.0, =1.0.0, =0.0.0, =0.0.2 and more Source cves: CVE-2018-20677 Source advisory: MEND:CVE-2018-20677...

@ajoursystem/arnisp-bootstrap-xlgrid (1.0.0), @arivazhagan/demo-project (1.0.1) +456 more potentially affected by CVE-2018-20676 via bootstrap (>=0.0.2, <=3.3.7)

bootstrap NPM version =0.0.2, =1.31.0-SNAPSHOT, =0.0.1, =0.0.1, =4.0.8, =1.0.0, =1.0.0, =0.0.0, =0.0.2 and more Source cves: CVE-2018-20676 Source advisory: MEND:CVE-2018-20676...

@antarctica/bas-style-kit (>=0.5.0-alpha, <=0.5.0), @antistatique/retraitespopulaires-styleguide (>=0.0.1, <=1.8.4) +153 more potentially affected by CVE-2018-20676 via bootstrap-sass (>=2.3.2, <=3.3.7)

bootstrap-sass NPM version =2.3.2, =0.5.0-alpha, =0.0.1, =0.0.1, =0.533.0, =8.0.0, =0.1.0, =2.0.2, =0.1.0, =0.0.1, =1.0.0, =1.0.1 - @opuscapita/oc-common-ui 8.3.3 and more Source cves: CVE-2018-20676 Source advisory: MEND:CVE-2018-20676...

@antarctica/bas-style-kit (>=0.5.0-alpha, <=0.5.0), @antistatique/retraitespopulaires-styleguide (>=0.0.1, <=1.8.4) +153 more potentially affected by CVE-2018-20677 via bootstrap-sass (>=2.3.2, <=3.3.7)

bootstrap-sass NPM version =2.3.2, =0.5.0-alpha, =0.0.1, =0.0.1, =0.533.0, =8.0.0, =0.1.0, =2.0.2, =0.1.0, =0.0.1, =1.0.0, =1.0.1 - @opuscapita/oc-common-ui 8.3.3 and more Source cves: CVE-2018-20677 Source advisory: MEND:CVE-2018-20677...

CVE-2016-10735

In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041...

@7ninjas/scss-mixins (>=0.0.0, <=1.0.0-alpha2), @alv-ch/alv-styleguide (>=0.0.1-1.alpha, <=0.1.8) +47 more potentially affected by CVE-2016-10735 via bootstrap (4.0.0-beta)

bootstrap NPM version 4.0.0-beta is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap and may be impacted: - @7ninjas/scss-mixins =0.0.0, =0.0.1-1.alpha, =0.0.1, =0.3.0, =0.0.1, =1.0.0, =0.2.15, =0.0.5, =0.1.0, =0.1.1 and more Source cves:...

CVE-2016-10735

In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041...

@ajoursystem/arnisp-bootstrap-xlgrid (1.0.0), @arivazhagan/demo-project (1.0.1) +455 more potentially affected by CVE-2016-10735 via bootstrap (>=3.1.1, <=3.3.7)

bootstrap NPM version =3.1.1, =1.31.0-SNAPSHOT, =0.0.1, =0.0.1, =4.0.8, =1.0.0, =1.0.0, =0.0.0, =0.0.2 and more Source cves: CVE-2016-10735 Source advisory: MEND:CVE-2016-10735...

CVE-2016-10735

CVE-2016-10735 affects Bootstrap 3.x prior to 3.4.0 and 4.x-beta prior to 4.0.0-beta.2, enabling cross-site scripting via the data-target attribute. This is a distinct issue from CVE-2018-14041. The vulnerability arises from improper handling of data-target, allowing injected scripts/HTML through...

@antarctica/bas-style-kit (>=0.5.0-alpha, <=0.5.0), @antistatique/retraitespopulaires-styleguide (>=0.0.1, <=1.8.4) +153 more potentially affected by CVE-2016-10735 via bootstrap-sass (>=2.3.2, <=3.3.7)

bootstrap-sass NPM version =2.3.2, =0.5.0-alpha, =0.0.1, =0.0.1, =0.533.0, =8.0.0, =0.1.0, =2.0.2, =0.1.0, =0.0.1, =1.0.0, =1.0.1 - @opuscapita/oc-common-ui 8.3.3 and more Source cves: CVE-2016-10735 Source advisory: MEND:CVE-2016-10735...

CVE-2016-10735

In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041...

CVE-2018-20676

In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute...

CVE-2018-20677

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property...

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

In Bootstrap, XSS is possible in the affix configuration target property...

Bootstrap Cross-Site Scripting Vulnerability (CNVD-2019-23270)

Bootstrap is an open source web front-end framework developed using HTML, CSS and JavaScript . A cross-site scripting vulnerability exists in affix in Bootstrap versions prior to 3.4.0, which can be exploited by remote attackers to inject arbitrary web script or HTML...

Bootstrap Cross-Site Scripting Vulnerability (CNVD-2019-23271)

Bootstrap is an open source web front-end framework developed using HTML, CSS and JavaScript . A cross-site scripting vulnerability exists in the tooltip data-viewport attribute in Bootstrap versions prior to 3.4.0, which can be exploited by remote attackers to inject arbitrary web script or HTML...