2433 matches found
Design/Logic Flaw
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
CVE-2018-14040
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
AZL-43750 CVE-2018-14040 affecting package python-openstackdocstheme 1.29.0-8
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
CVE-2018-14041
In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy...
CVE-2018-14042
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...
CVE-2018-14040
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
CVE-2018-14041
In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy...
CVE-2018-14041
In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy...
AZL-44334 CVE-2018-14040 affecting package python-openstackdocstheme 3.0.0-9
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
UBUNTU-CVE-2018-14042
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...
Design/Logic Flaw
In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy...
Design/Logic Flaw
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...
DEBIAN-CVE-2018-14042
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...
CVE-2018-14040
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
AZL-13232 CVE-2018-14040 affecting package reaper for versions less than 3.1.1-1
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
UBUNTU-CVE-2018-14040
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
CVE-2018-14041
In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy...
CVE-2018-14041
CVE-2018-14041 affects Bootstrap: XSS in the data-target attribute of scrollspy for Bootstrap versions before 4.1.2. The root cause is unvalidated input in data-target, enabling HTML/JS injection. Remediation is to upgrade to Bootstrap 4.1.2 or later (as referenced by Bootstrap’s security note). ...
