CVE-2019-8331

In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.

Affected products

Almalinux, Bootstrap, Centos, Red Hat, Rocky Linux

Getbootstrap Bootstrap

< 3.4.1, 4.3.1

Fix

Available

CVSS 3.1

6.1 MEDIUM

EPSS

16.4% (97th percentile)

Weakness

CWE-79

NVD status

Modified

Published

2019-02-20