CVE-2024-6485

Name of the Vulnerable Software and Affected Versions bootstrap (affected versions not specified)

Description A security issue has been discovered that could enable Cross-Site Scripting (XSS) attacks. The issue is associated with the data-loading-text attribute within the button plugin. This can be exploited by injecting malicious JavaScript code into the attribute, which would then be executed when the button's loading state is triggered.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.