In breve
- CVE-2025-1647 è una vulnerabilità MEDIO (CVSS 5.6) che riguarda bootstrap.
- Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 0.43%, superiore al 37.5% delle vulnerabilità.
- Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.
| Package | Affected versions | Patched versions |
|---|
| bootstrap npm | = 3.4.1
| No fix yet |
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site Scripting (XSS). This issue affects Bootstrap version 3.4.1. At time of publication, there is no publicly available patched version.
NVD description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site Scripting (XSS).This issue affects Bootstrap: from 3.4.1 before 4.0.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free