En resumen
- CVE-2025-1647 es una vulnerabilidad MEDIO (CVSS 5.6) que afecta a bootstrap.
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.43%, mayor que el 37.5% de las vulnerabilidades.
- Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.
| Package | Affected versions | Patched versions |
|---|
| bootstrap npm | = 3.4.1
| No fix yet |
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site Scripting (XSS). This issue affects Bootstrap version 3.4.1. At time of publication, there is no publicly available patched version.
NVD description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site Scripting (XSS).This issue affects Bootstrap: from 3.4.1 before 4.0.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free