Description
Versions of bootstrap-vue prior to 2.0.0-rc.12 are vulnerable to Cross-Site Scripting. Due to insufficient input sanitization, components may be vulnerable to Cross-Site Scripting through the options variable. This may lead to the execution of malicious JavaScript on the user’s browser.
Recommendation
Update the bootstrap-vue package to the latest compatible version. Followings are version details:
- Affected version(s): <= 2.0.0-rc.11
- Patched version(s): 2.0.0-rc.12
References
Could your website be exposed too?
SmartScanner can check your website for Cross-Site Scripting in bootstrap-vue and gives you actionable findings to investigate.
Start a free scanRelated Issues
- Cross-Site Scripting in bootstrap-select - bootstrap-select - Vulnerability
- vue-i18n has cross-site scripting vulnerability with prototype pollution - CVE-2024-52809
- vue-i18n has cross-site scripting vulnerability with prototype pollution - vue-i18n - CVE-2024-52809
- Bootstrap Cross-site Scripting vulnerability - bootstrap - GHSA-pj7m-g53m-7638 - CVE-2018-14041
You might also like:
See something that needs correcting? Let us knowUpdated April 03, 2023