Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:4226
HistoryMay 15, 2017 - 2:16 a.m.

Cross-site Scripting (XSS)

2017-05-1502:16:19
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
164

0.002 Low

EPSS

Percentile

61.2%

bootstrap is vulnerable to cross-site scripting (XSS) attacks. The attacks exist because the data-target attribute uses user-supplied input which is then interpreted directly using standard HTML entities encoding.