PkgSeer

Vulnerability GHSA-ph58-4vrj-w6hr

Medium Risk
MEDIUM RISK
CVSS Score: 6.1
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
7 years ago
January 17, 2019 at 01:57 PM UTC
bootstrap Cross-site Scripting vulnerability
0.0.1 - 3.3.7
0.0.1 - 3.3.7

Summary

bootstrap Cross-site Scripting vulnerability

Details

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

Related Vulnerabilities

Other vulnerabilities affecting the same packages

Medium Risk
1 year ago
Bootstrap Vulnerable to Cross-Site Scripting in its Popover and Tooltip Components
3.4.1 GHSA-q58r-hwc8-rm9j
3.4.1 GHSA-q58r-hwc8-rm9j
Medium Risk
2 years ago
Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributes
3.1.1 - 3.4.1 GHSA-vxmc-5x29-h64v
3.1.1 - 3.4.1 GHSA-vxmc-5x29-h64v
Medium Risk
4 years ago
Bootstrap vulnerable to Cross-Site Scripting (XSS)
3.1.0 - 4.1.1 GHSA-3wqf-4x89-9g79
3.1.0 - 4.1.1 GHSA-3wqf-4x89-9g79
Medium Risk
4 years ago
Bootstrap vulnerable to Cross-Site Scripting (XSS)
3.1.0 - 4.1.1 GHSA-3wqf-4x89-9g79
3.1.0 - 4.1.1 GHSA-3wqf-4x89-9g79
Medium Risk
4 years ago
Bootstrap vulnerable to Cross-Site Scripting (XSS)
3.1.0 - 4.1.1 GHSA-3wqf-4x89-9g79
3.1.0 - 4.1.1 GHSA-3wqf-4x89-9g79
View all vulnerabilities for these packages

Impacted packages

Timeline

Published
7 years ago
January 17, 2019 at 01:57 PM UTC
Fixed (3.4.0)
7 years ago
December 13, 2018 at 11:45 PM UTC
Fixed (3.4.0)
7 years ago
December 13, 2018 at 11:50 PM UTC
Fixed (3.4.0)
7 years ago
December 14, 2018 at 12:37 PM UTC
Fixed (3.4.0)
7 years ago
December 14, 2018 at 12:38 PM UTC
Fixed (3.4.0)
7 years ago
December 16, 2018 at 04:18 AM UTC
Fixed (3.4.0)
Unknown
Unknown
Last Modified
29 days ago
September 10, 2026 at 03:47 AM UTC