Search for packages
| purl | pkg:nuget/Bootstrap.Less@3.3.6 |
| Next non-vulnerable version | None. |
| Latest non-vulnerable version | None. |
| Risk score | 2.8 |
| Advisory | Summary | Fixed in package version |
|---|---|---|
|
GHSA-9v3m-8fp8-mj99
Aliases: CVE-2019-8331 |
Bootstrap Vulnerable to Cross-Site Scripting Versions of `bootstrap` prior to 3.4.1 for 3.x and 4.3.1 for 4.x are vulnerable to … |
Vulnerable |
|
CVE-2018-20677
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In Bootstrap, XSS is possible in the affix configuration target … |
Vulnerable |
|
CVE-2018-20676
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In Bootstrap, XSS is possible in the tooltip data-viewport attribute. |
Vulnerable |
|
CVE-2016-10735
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In Bootstrap, XSS is possible in the data-target attribute, a … |
Vulnerable |
|
CVE-2018-14041
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In Bootstrap, XSS is possible in the data-target property of … | There are no reported fixed by versions. |
|
CVE-2018-14042
|
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') In Bootstrap, XSS is possible in the data-container property of … | There are no reported fixed by versions. |