CVE-2026-114538

The Bootstrap Drupal theme (versions 0.0.0 to 3.45.0 ) is vulnerable to Cross-Site Scripting (XSS) due to insufficient filtering of certain attributes during web page generation. This issue specifically affects the optional tooltip and popover features. As a short-term mitigation, users can disab...