Vulnerability GHSA-q58r-hwc8-rm9j
Medium Risk
MEDIUM RISK
CVSS Score: 5.6
Score Range: 4.0–6.9
Medium severity vulnerabilities (CVSS 4.0–6.9). Important issues that meaningfully reduce security confidence.
1 year ago
May 15, 2025 at 06:31 PM UTC
Bootstrap Vulnerable to Cross-Site Scripting in its Popover and Tooltip Components
3.4.1
3.4.1
Summary
Bootstrap Vulnerable to Cross-Site Scripting in its Popover and Tooltip Components
Details
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site Scripting (XSS). This issue affects Bootstrap version 3.4.1. At time of publication, there is no publicly available patched version.
Related Vulnerabilities
Other vulnerabilities affecting the same packages
Medium Risk
2 years ago
Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributes
3.1.1 - 3.4.1 GHSA-vxmc-5x29-h64v
3.1.1 - 3.4.1 GHSA-vxmc-5x29-h64v
Medium Risk
4 years ago
Bootstrap vulnerable to Cross-Site Scripting (XSS)
3.1.1 - 3.3.7 and 4.0.0 - 4.1.1 GHSA-3wqf-4x89-9g79
3.1.1 - 3.3.7 and 4.0.0 - 4.1.1 GHSA-3wqf-4x89-9g79
Medium Risk
7 years ago
Bootstrap Vulnerable to Cross-Site Scripting
3.1.1 - 3.4.0 and 4.0.0 - 4.3.0 GHSA-9v3m-8fp8-mj99
3.1.1 - 3.4.0 and 4.0.0 - 4.3.0 GHSA-9v3m-8fp8-mj99
Medium Risk
7 years ago
bootstrap Cross-site Scripting vulnerability
0.0.1 - 3.3.7 GHSA-ph58-4vrj-w6hr
0.0.1 - 3.3.7 GHSA-ph58-4vrj-w6hr
Medium Risk
7 years ago
XSS vulnerability that affects bootstrap
0.0.1 - 3.3.7 GHSA-3mgp-fx93-9xv5
0.0.1 - 3.3.7 GHSA-3mgp-fx93-9xv5
Impacted packages
Timeline
Published
1 year ago
May 15, 2025 at 06:31 PM UTC
Last Modified
3 hours ago
October 09, 2026 at 12:45 PM UTC