2938 matches found
AZL-13232 CVE-2018-14040 affecting package reaper for versions less than 3.1.1-1
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
CVE-2018-14042
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...
CVE-2018-14042
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...
CVE-2018-14040
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
CVE-2018-14041
CVE-2018-14041 affects Bootstrap: XSS in the data-target attribute of scrollspy for Bootstrap versions before 4.1.2. The root cause is unvalidated input in data-target, enabling HTML/JS injection. Remediation is to upgrade to Bootstrap 4.1.2 or later (as referenced by Bootstrap’s security note). ...
CVE-2018-14040
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
CVE-2018-14041
In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy...
CVE-2018-14042
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...
CVE-2018-14040
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...
CVE-2018-14042
CVE-2018-14042 refers to Bootstrap prior to 4.1.2 where the data-container property used by tooltips can trigger cross-site scripting (XSS). The vulnerability arises in the tooltip component’s handling of the data-container attribute, enabling injection of arbitrary HTML/JS when the affected Boot...
CVE-2018-14040
CVE-2018-14040 affects Bootstrap prior to 4.1.2, where an XSS vulnerability exists in the collapse data-parent attribute. The root cause is HTML/script-injection via the collapse component’s data-parent handling. The vulnerability impacts Bootstrap-based implementations using collapse and can lea...
CVE-2018-14041
In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy...
CVE-2018-14041
In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy...
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
In Bootstrap, XSS is possible in the data-container property of tooltip...
CVE-2018-14042: Improper Neutralization of Input During Web Page Generation
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip...
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
In Bootstrap, XSS is possible in the collapse data-parent attribute...
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
In Bootstrap, XSS is possible in the data-target property of scrollspy...
PT-2018-3486
Name of the Vulnerable Software and Affected Versions: Bootstrap versions prior to 4.1.2 Description: The issue is related to the ScrollSpy plugin in Bootstrap, where a lack of protection in the web page structure allows for cross-site scripting XSS attacks. This can be exploited by a remote...