Lucene search
+L

115 matches found

osv_ghsa
osv_ghsa
•added 2024/07/11 6:31 p.m.•19 views

GHSA-VXMC-5X29-H64V Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributes

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS7AI score0.00494EPSS
SaveExploits0References4
Snyk
Snyk
•added 2024/07/11 5:40 p.m.•5 views

Cross-site Scripting

Overview org.webjars.bowergithub.jasny:bootstrap is a popular front-end framework for faster and easier web development. Affected versions of this package are vulnerable to Cross-site Scripting through the data-loading-text attribute in the button component. An attacker can execute arbitrary...

6.4CVSS5.6AI score0.00494EPSS
SaveExploits0References2
Snyk
Snyk
•added 2024/07/11 5:40 p.m.•10 views

Cross-site Scripting

Overview org.fujion.webjars:bootstrap is a popular front-end framework for faster and easier web development. Affected versions of this package are vulnerable to Cross-site Scripting through the data-loading-text attribute in the button component. An attacker can execute arbitrary JavaScript code...

6.4CVSS5.6AI score0.00494EPSS
SaveExploits0References2
osv_azl
osv_azl
•added 2024/07/11 5:15 p.m.•12 views

AZL-105134 CVE-2024-6485 affecting package ceph 18.2.2-13

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS5.8AI score0.00494EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/07/11 5:15 p.m.•21 views

AZL-71317 CVE-2024-6485 affecting package reaper for versions less than 3.1.1-22

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS6.6AI score0.00494EPSS
SaveExploits0References1
NVD
NVD
•added 2024/07/11 5:15 p.m.•30 views

CVE-2024-6485

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS0.00494EPSS
SaveExploits0References2
osv_cve
osv_cve
•added 2024/07/11 5:15 p.m.•22 views

CVE-2024-6485

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6AI score
SaveExploits0References1
osv_debian
osv_debian
•added 2024/07/11 5:15 p.m.•10 views

DEBIAN-CVE-2024-6485

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS6.6AI score0.00494EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/07/11 5:15 p.m.•15 views

AZL-105158 CVE-2024-6485 affecting package fluent-bit 3.1.10-7

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS5.8AI score0.00494EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/07/11 5:15 p.m.•11 views

AZL-105206 CVE-2024-6485 affecting package ntopng 5.2.1-6

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS5.8AI score0.00494EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/07/11 5:15 p.m.•11 views

AZL-105272 CVE-2024-6485 affecting package pytorch 2.2.2-17

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS5.8AI score0.00494EPSS
SaveExploits0References1
osv_azl
osv_azl
•added 2024/07/11 5:15 p.m.•12 views

AZL-105104 CVE-2024-6485 affecting package python-openstackdocstheme 3.0.0-9

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS0.00494EPSS
SaveExploits0References1
osv_ubuntu
osv_ubuntu
•added 2024/07/11 5:15 p.m.•16 views

UBUNTU-CVE-2024-6485

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS6.6AI score0.00494EPSS
SaveExploits0References4
Mend
Mend
•added 2024/07/11 5:08 p.m.•6 views

CVE-2024-6485

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS0.00494EPSS
SaveExploits0References4
Debian CVE
Debian CVE
•added 2024/07/11 5:08 p.m.•34 views

CVE-2024-6485

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS6.6AI score0.00494EPSS
SaveExploits0
CVE
CVE
•added 2024/07/11 5:08 p.m.•193 views

CVE-2024-6485

CVE-2024-6485 is a Bootstrap XSS vulnerability in the button component’s data-loading-text attribute. Affected: Bootstrap 3.x (notably Bootstrap 3.x series); impact is cross-site scripting when the loading state is triggered. Mitigation: Debian LTS advisory indicates fixed in 3.4.1+dfsg-2+deb11u1...

6.4CVSS6AI score0.00494EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/07/11 12:00 a.m.•4 views

PT-2024-42038

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS0.00494EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/07/11 12:00 a.m.•4 views

PT-2024-42039

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS0.00494EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/07/11 12:00 a.m.•4 views

PT-2024-42036

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS0.00494EPSS
SaveExploits0References2
Positive Technologies
Positive Technologies
•added 2024/07/11 12:00 a.m.•4 views

PT-2024-42037

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting XSS attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribut...

6.4CVSS0.00494EPSS
SaveExploits0References2
Rows per page
Query Builder