Vulnerability library
Security checkAugust 05, 2024

Bootstrap Cross-site Scripting vulnerability - bootstrap - GHSA-4p24-vmcr-4gqj

Understand the exposure, see the recommended fix, and check whether your own website has related weaknesses.

Medium severitynpmbootstrap

Check your website

Find this and other vulnerabilities with a free scan.

Your scan runs on your computer. No account required.

Description

In Bootstrap 2.x from 2.0.4, 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute. Note that this is a different vulnerability than CVE-2018-14041.

See https://blog.getbootstrap.com/2018/12/13/bootstrap-3-4-0/ for more info.

Recommendation

Update the bootstrap package to the latest compatible version. Followings are version details:

  • Affected version(s): **>= 2.0.4, < 3.4.0 >= 4.0.0-beta, < 4.0.0-beta.2**
  • Patched version(s): **3.4.0 4.0.0-beta.2**

References

Could your website be exposed too?

SmartScanner can check your website for Bootstrap Cross-site Scripting vulnerability - bootstrap - GHSA-4p24-vmcr-4gqj and gives you actionable findings to investigate.

Start a free scan

Related Issues

You might also like:

How do hackers hack websites?

CSRF, XXE, and 12 Other Security Acronyms Explained

Exploiting Server Version Disclosure

See something that needs correcting? Let us knowUpdated August 05, 2024