Description
In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.
Remediation
References
Related Vulnerabilities
WordPress Plugin WooCommerce Catalog Enquiry Arbitrary File Upload (3.0.0)
Drupal Core 4.7.x HTTP Response Splitting (4.7.0 - 4.7.7)
WordPress Permissions, Privileges, and Access Controls Vulnerability (CVE-2013-2200)
WordPress Plugin Britetechs Companion Malicious Code (2.2.7)
WordPress Improper Authentication Vulnerability (CVE-2008-1930)