Description
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.
Remediation
References
Related Vulnerabilities
WordPress Plugin Photo Gallery by 10Web-Mobile-Friendly Image Gallery Cross-Site Scripting (1.5.22)
Dotclear Unrestricted Upload of File with Dangerous Type Vulnerability (CVE-2016-9268)
WordPress Plugin Login as User or Customer Cross-Site Request Forgery (1.9)
MySQL CVE-2020-14790 Vulnerability (CVE-2020-14790)
Oracle Application Server Other Vulnerability (CVE-2002-0947)