Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:nuget/Bootstrap.Less@2.3.0
purl pkg:nuget/Bootstrap.Less@2.3.0
Next non-vulnerable version None.
Latest non-vulnerable version None.
Risk score
Vulnerabilities affecting this package (4)
Advisory Summary Fixed in package version
CVE-2018-20677

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In Bootstrap, XSS is possible in the affix configuration target …
3.4.0
Vulnerable
CVE-2018-20676

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In Bootstrap, XSS is possible in the tooltip data-viewport attribute.
3.4.0
Vulnerable
CVE-2018-14041

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In Bootstrap, XSS is possible in the data-target property of … There are no reported fixed by versions.
CVE-2018-14042

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In Bootstrap, XSS is possible in the data-container property of … There are no reported fixed by versions.
This package is not known to fix any advisories.