https-nj.gov---CVE-2018-14040

https-nj.gov---CVE-2018-14040 Vulnearability Report of the New Jersey official site In Bootstrap prior to 4.1.2, XSS is possible in the main collapse data attribute. The data-target attribute and the data-parent attribute is vulnerable to Cross-Site Scripting attacks. Test RECOMMENDATION The fix...

Security Bulletin: Cross-Site Scripting (XSS) Vulnerability in data-target Attribute Handling in Bootstrap, affects watsonx.data

Summary A Cross-Site Scripting XSS vulnerability in Bootstrap versions before 3.4.0 and 4.0.0-beta.2 allows attackers to inject malicious code via the data-target attribute due to improper input handling. This can affect watsonx.data. Vulnerability Details CVEID:CVE-2016-10735 DESCRIPTION: In...

bootstrap: Cross-site Scripting (XSS) in the collapse data-parent attribute

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...

AZL-43750 CVE-2018-14040 affecting package python-openstackdocstheme 1.29.0-8

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...

CVE-2018-14040: Improper Neutralization of Input During Web Page Generation

In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute...