Search for packages
| purl | pkg:nuget/Bootstrap.Less@3.4.0 |
| Vulnerability | Summary | Fixed by |
|---|---|---|
|
VCID-p87t-vvdx-b7dv
Aliases: CVE-2019-8331 GHSA-9v3m-8fp8-mj99 GHSA-fxwm-579q-49qq GHSA-wh77-3x4m-4q9g |
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In Bootstrap, XSS is possible in the tooltip or popover data-template attribute. |
Affected by 0 other vulnerabilities. |
| Vulnerability | Summary | Aliases |
|---|---|---|
| VCID-br4c-7x9j-g3f6 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In Bootstrap, XSS is possible in the tooltip data-viewport attribute. |
CVE-2018-20676
GHSA-3mgp-fx93-9xv5 |
| VCID-eh2s-9hss-yken | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In Bootstrap, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041. |
CVE-2016-10735
GHSA-4p24-vmcr-4gqj |
| VCID-hbwg-ebvx-k7e1 | Cross-site Scripting In Bootstrap, XSS is possible in the collapse data-parent attribute. |
CVE-2018-14040
GHSA-3wqf-4x89-9g79 |
| VCID-hqne-7h6h-3ff8 | Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In Bootstrap, XSS is possible in the affix configuration target property. |
CVE-2018-20677
GHSA-ph58-4vrj-w6hr |