Description
In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.
Remediation
References
Related Vulnerabilities
WordPress Plugin wordpress vertical image slider Multiple Vulnerabilities (1.0)
Drupal Core 9.3.x Security Bypass (9.3.0 - 9.3.11)
Jboss EAP Uncontrolled Resource Consumption Vulnerability (CVE-2021-3690)
Liferay Portal Allocation of Resources Without Limits or Throttling Vulnerability (CVE-2024-26265)
WordPress Plugin Add From Server Directory Traversal (3.3.3)