Cross-Site Scripting (XSS)

🗓️ 08 Sep 2025 04:31:41Reported by Veracode Vulnerability DatabaseType

Bootstrap XSS via data-loading-text in button plugin allows malicious JavaScript when loading state is triggered.

Reporter	Title	Published	Views	Family All 44
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	15 Mar 202500:18	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	19 Dec 202416:32	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM API Connect	30 Jan 202617:20	–	ibm
IBM Security Bulletins	Security Bulletin: Cross-Site Scripting (XSS) Vulnerability in data-target Attribute Handling in Bootstrap, affects watsonx.data	7 Apr 202611:00	–	ibm
IBM Security Bulletins	Security Bulletin: The following vulnerabilities that can affect IBM Storage Scale Management GUI and/or BDA are now included.	2 Mar 202623:03	–	ibm
AstraLinux	Astra Linux - уязвимость в twitter-bootstrap3	3 May 202623:59	–	astralinux
CBLMariner	CVE-2024-6485 affecting package reaper for versions less than 3.1.1-22	7 Jan 202619:09	–	cbl_mariner
Chainguard	CVE-2024-6485 vulnerabilities	7 Jan 202601:29	–	cgr
Circl	CVE-2024-6485	11 Jul 202419:59	–	circl
CNNVD	Bootstrap Security Vulnerabilities	11 Jul 202400:00	–	cnnvd

Vulners

Node

bootstrap bootstrapRange1.4.0–3.4.0js

bootstrap bootstrapRange1.4.0–3.4.1js

bootstrap bootstrapRange3.1.1–3.4.1js

bootstrap bootstrapRange1.4.0–3.4.0js

Source	Link
herodevs	www.herodevs.com/vulnerability-directory/cve-2024-6485
herodevs	www.herodevs.com/vulnerability-directory/cve-2024-6485
herodevs	www.herodevs.com/vulnerability-directory/cve-2024-6485
lists	www.lists.debian.org/debian-lts-announce/2025/04/msg00020.html
github	www.github.com/advisories/GHSA-vxmc-5x29-h64v

03 Nov 2025 22:21Current

6.4Medium risk

Vulners AI Score6.4

CVSS 3.16.4

EPSS0.00139

SSVC