Approved changes feed: RSS · Atom

cpe:2.3:a:bootstrap-sass:bootstrap-sass:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorBootstrap Sass (7c800468-120e-5406-91f6-bdd03f9dad64)
ProductBootstrap Sass (7f5ef385-ded2-565d-830c-71b8a6f46065)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-6485 vulnerable 2026-06-08 06:58:19.573176 XSS in Bootstrap button component
MEDIUM (6.4)
A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribute, which would then be executed when the button's loading state is triggered.
Published: 2024-07-11T17:08:08.224Z
Updated: 2025-11-03T19:34:34.709Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.