Sifchain · Report #1198203
Bootstrap library is vulnerable
N/Astatus
lowseverity
2upvotes
6 Sept 2021disclosed
How it was found
Summary: The identified library bootstrap, version 4.0.0 is vulnerable Steps To Reproduce: Please upgrade to the latest version of bootstrap.
Supporting Material/References:
https://github.com/twbs/bootstrap/issues/28236 https://github.com/twbs/bootstrap/issues/20184
Impact
XSS was possible in the tooltip or popover data-template, data-content and data-title attributes.