Description

In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.

Remediation

References

CVE-2018-20676

Related Vulnerabilities

Django Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2016-2512)

WordPress Plugin NextGEN Gallery-WordPress Gallery SQL Injection (3.2.10)

WordPress 4.2.x Multiple Vulnerabilities (4.2 - 4.2.11)

WordPress Plugin Usernoise modal feedback/contact form Cross-Site Scripting (3.7.8)

Nexus Repository Manager Server-Side Request Forgery (SSRF) Vulnerability (CVE-2021-43293)

Severity

Medium

Classification

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities CWE-707 CVE-2018-20676