Description
In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.
Remediation
References
Related Vulnerabilities
WordPress Plugin Wordpress Picture/Portfolio/Media Gallery Server-Side Request Forgery (3.0.1)
WordPress Plugin Image Gallery with Slideshow Multiple Vulnerabilities (1.5.2)
WordPress Plugin OMGF-Host Google Fonts Locally Multiple Vulnerabilities (4.5.3)
PHP Data Processing Errors Vulnerability (CVE-2015-4025)
Envoy Proxy Excessively Deep Nesting Vulnerability (CVE-2026-48042)