Approved changes feed: RSS · Atom
cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Getbootstrap (2323d4aa-68e8-5415-beac-57a5910e32e8) |
|---|---|
| Product | Bootstrap (8b330daa-f78d-5c5a-a300-96e7fd7daffc) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from purl2cpe mapping |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/twbs/bootstrap |
purl2cpe | 2026-06-01 10:17:19.727690 |
pkg:npm/bootstrap |
purl2cpe | 2026-06-01 10:17:19.727693 |
pkg:nuget/bootstrap |
purl2cpe | 2026-06-01 10:17:19.727696 |
pkg:sourceforge/bootstrap.mirror |
purl2cpe | 2026-06-01 10:17:19.727699 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2024-6485 |
vulnerable | 2026-06-08 06:58:19.571381 |
XSS in Bootstrap button component
MEDIUM (6.4)
A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribute, which would then be executed when the button's loading state is triggered.
Published: 2024-07-11T17:08:08.224Z
Updated: 2025-11-03T19:34:34.709Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-8331 |
vulnerable | 2026-06-08 05:14:23.844470 |
Details available
In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
Published: 2019-02-20T16:00:00.000Z
Updated: 2024-08-04T21:17:31.342Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20677 |
vulnerable | 2026-06-08 05:11:27.722695 |
Details available
In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.
Published: 2019-01-09T05:00:00.000Z
Updated: 2024-08-05T12:05:17.696Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-20676 |
vulnerable | 2026-06-08 05:11:27.722085 |
Details available
In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.
Published: 2019-01-09T05:00:00.000Z
Updated: 2024-08-05T12:05:17.824Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14042 |
vulnerable | 2026-06-08 05:10:52.630124 |
Details available
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
Published: 2018-07-13T14:00:00.000Z
Updated: 2024-08-05T09:21:41.010Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14041 |
vulnerable | 2026-06-08 05:10:52.629272 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14040 |
vulnerable | 2026-06-08 05:10:52.623081 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2016-10735 |
vulnerable | 2026-06-08 05:07:25.654806 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.