CVE-2018-20677
In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.
Published Updated
PatchFirst · Latest vulnerabilities
Vulnerabilities published for twitter-bootstrap4 in the last 30 days: 0. Listed in the KEV catalogue: 0.
Vulnerabilities: 2
In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.
In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.
Check your installed stack and versions against the current vulnerability feeds.