MEDIUM5.6
GHSA-q58r-hwc8-rm9j
Bootstrap Vulnerable to Cross-Site Scripting in its Popover and Tooltip Components
Details
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site Scripting (XSS). This issue affects Bootstrap version 3.4.1. At time of publication, there is no publicly available patched version.
Are you affected?
Enter the version of the package you're using.
Affected packages
npm/bootstrap
No fixed version published yet for bootstrap (npm). Pin to a known-safe version or switch to an alternative.