Cross-site Scripting in bootstrap-table

MEDIUM 5.4CVE-2022-1726 · GHSA-grw5-g9h2-wpg8 · Published 16/05/2022 · updated 17/06/2026

In short

CVE-2022-1726 is a MEDIUM (CVSS 5.4) vulnerability affecting bootstrap table (bootstrap-table), bootstrap-table.
Chance of exploitation in the next 30 days (EPSS): 0.89%, higher than 59.5% of all vulnerabilities.
Fix: update to 1.20.2 or later.

Package	Affected versions	Patched versions
bootstrap table bootstrap-table	`< 1.20.2`	`1.20.2`
bootstrap-table npm	`< 1.20.2`	`1.20.2`

Description

Bootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in GitHub repository wenzhixin/bootstrap-table prior to 1.20.2. Disclosing session cookies, disclosing secure session data, exfiltrating data to third-parties.

NVD description

References

nvd.nist.gov/vuln/detail/CVE-2022-1726 · ADVISORY
wenzhixin/bootstrap-table commit b4a1e5d · WEB
wenzhixin/bootstrap-table · PACKAGE
huntr.dev/bounties/9b85cc33-0395-4c31-8a42-3a94beb2efea · WEB

More vulnerabilities in bootstrap table

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

bootstrap table

bootstrap-table

< 1.20.2

1.20.2

bootstrap-table

npm

< 1.20.2

1.20.2

Description

NVD description