3 matches found
CVE-2018-14041
In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy...
6.1CVSS5.8AI score
SaveExploits0References17
Design/Logic Flaw
In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy...
4.3CVSS6AI score0.04293EPSS
SaveExploits1References17Affected Software1
CVE-2018-14041
CVE-2018-14041 affects Bootstrap: XSS in the data-target attribute of scrollspy for Bootstrap versions before 4.1.2. The root cause is unvalidated input in data-target, enabling HTML/JS injection. Remediation is to upgrade to Bootstrap 4.1.2 or later (as referenced by Bootstrap’s security note). ...
6.1CVSS6AI score0.04293EPSS
SaveExploits1References17Affected Software1
20