Contents

---
gem: bootstrap
cve: 2016-10735
url: https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2/
title: XSS vulnerability via data-target in bootstrap
date: 2016-07-27

description: |
  In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2,
  XSS is possible in the data-target attribute.

cvss_v2: 4.3
cvss_v3: 6.1

patched_versions:
  - '>= 4.0.0-beta.2'

related:
  url:
    - https://github.com/twbs/bootstrap/issues/20184

Version data entries

1 entries across 1 versions & 1 rubygems

Version	Path
bundler-audit-0.7.0.1	data/ruby-advisory-db/gems/bootstrap/CVE-2016-10735.yml