Em resumo
- CVE-2025-1647 é uma vulnerabilidade MÉDIO (CVSS 5.6) que afeta bootstrap.
- Chance de exploração nos próximos 30 dias (EPSS): 0.43%, maior que 37.5% das vulnerabilidades.
- Ainda não há versão corrigida: acompanhe o aviso do fornecedor em Referências.
| Package | Affected versions | Patched versions |
|---|
| bootstrap npm | = 3.4.1
| No fix yet |
Description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site Scripting (XSS). This issue affects Bootstrap version 3.4.1. At time of publication, there is no publicly available patched version.
NVD description
Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site Scripting (XSS).This issue affects Bootstrap: from 3.4.1 before 4.0.0.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free