Skip to content
CVE PROGRAM SOURCE RECORD5.6 Medium

CVE-2025-1647

XSS in Bootstrap title attribute for Tooltip and Popover

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
HeroDevs

Description

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site Scripting (XSS).This issue affects Bootstrap: from 3.4.1 before 4.0.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Bootstrap Bootstrap

Default version status: unaffected

  • 3.4.1 to < 4.0.0affected

References