CVE-2016-1000227

All versions of "bootstrap-tagsinput" are vulnerable to cross-site scripting when user input is passed into the "itemTitle" parameter unmodified, as the package fails to properly sanitize or encode user input for that parameter...

Cross-Site Scripting in bootstrap-tagsinput

All versions of bootstrap-tagsinput are vulnerable to cross-site scripting when user input is passed into the itemTitle parameter unmodified, as the package fails to properly sanitize or encode user input for that parameter. Recommendation This package is not actively maintained, and has not seen...

GHSA-V2JQ-9475-R5G8 Cross-Site Scripting in bootstrap-tagsinput

All versions of bootstrap-tagsinput are vulnerable to cross-site scripting when user input is passed into the itemTitle parameter unmodified, as the package fails to properly sanitize or encode user input for that parameter. Recommendation This package is not actively maintained, and has not seen...

@corex/argon-theme (>=1.1.1, <=1.1.33), @creative-tim-official/argon-dashboard-free (1.2.0) +14 more potentially affected by CVE-2016-1000227 via bootstrap-tagsinput (0.7.1)

bootstrap-tagsinput NPM version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap-tagsinput and may be impacted: - @corex/argon-theme =1.1.1, =0.27.0-rc1, =0.0.1, =0.1.0, =3.0.0, =1.2.0, =0.1.0, =0.2.0, =0.1.1, =1.2.6, =1.4.0, =0.1.89,...

@corex/argon-theme (>=1.1.1, <=1.1.33), @creative-tim-official/argon-dashboard-free (1.2.0) +14 more potentially affected by CVE-2016-1000227 via bootstrap-tagsinput (0.7.1)

bootstrap-tagsinput NPM version 0.7.1 is affected by a known vulnerability. The following packages have a transitive dependency on bootstrap-tagsinput and may be impacted: - @corex/argon-theme =1.1.1, =0.27.0-rc1, =0.0.1, =0.1.0, =3.0.0, =1.2.0, =0.1.0, =0.2.0, =0.1.1, =1.2.6, =1.4.0, =0.1.89,...

PT-2020-7935

Name of the Vulnerable Software and Affected Versions: bootstrap-tagsinput versions all Description: The issue arises from the failure to properly sanitize or encode user input for the itemTitle parameter, leading to cross-site scripting when user input is passed into this parameter unmodified...

Cross-Site Scripting

Overview All versions of bootstrap-tagsinput are vulnerable to cross-site scripting when user input is passed into the itemTitle parameter unmodified, as the package fails to properly sanitize or encode user input for that parameter. Recommendation This package is not actively maintained, and has...