Lucene search
Veracode Vulnerability DatabaseVERACODE:4918HistoryAug 18, 2017 - 10:09 a.m.
Cross-site Scripting (XSS)
2017-08-1810:09:01
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
49.9%
bootstrap-select is vulnerable to cross-site scripting (XSS) attacks. The library does not sanitize the titles of the options, allowing a malicious user to inject and execute arbitrary javascript.
References
github.com/advisories/GHSA-9r7h-6639-v5mw
github.com/silviomoreto/bootstrap-select/blob/48f63f6edfd16d82607719f6680c52e2e3753d5d/js/bootstrap-select.js#L276
github.com/silviomoreto/bootstrap-select/issues/1691
github.com/snapappointments/bootstrap-select/issues/2199
jsfiddle.net/b2q65nbe/2/
www.npmjs.com/advisories/1522
Related
osv
osv
Cross-Site Scripting in bootstrap-select
2020-09-03 15:54:00
Cross-site scripting in bootstrap-select
2021-05-07 16:47:54
CVE-2019-20921
2020-09-30 18:15:18
nodejs
nodejs
Cross-site scripting in bootstrap-select
2021-05-07 16:49:09
nvd
nvd
CVE-2019-20921
2020-09-30 18:15:18
prion
prion
Cross site scripting
2020-09-30 18:15:00
cvelist
cvelist
CVE-2019-20921
2020-09-30 12:30:36
github
github
Cross-site scripting in bootstrap-select
2021-05-07 16:47:54
nessus
nessus
cve
cve
CVE-2019-20921
2020-09-30 18:15:18
redhatcve
redhatcve
CVE-2019-20921
2020-09-30 16:17:52
