Description

In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.

Remediation

References

CVE-2016-10735

Related Vulnerabilities

Apache HTTP Server CVE-2004-0786 Vulnerability (CVE-2004-0786)

WordPress Plugin YouTube Video Inserter Cross-Site Scripting (1.2.1.0)

PHP Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability (CVE-2010-4698)

WordPress Plugin Stop Spammers Security-Block Spam Users, Comments, Forms Cross-Site Scripting (2021.8)

MySQL CVE-2012-0578 Vulnerability (CVE-2012-0578)

Severity

Medium

Classification

CVE-2016-10735 CWE-707 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Tags

Missing Update Known Vulnerabilities