Cross-site Scripting (XSS)

bootstrap is vulnerable to cross-site scripting XSS attacks. The library does not properly sanitize the data-target variable in scrollspy.js, allowing a malicious user to inject and execute arbitrary Javascript...