CVE-2018-14042

Name of the Vulnerable Software and Affected Versions Bootstrap versions 2.3.0 through 4.1.1

Description The issue allows for XSS in the data-container property of tooltip. There is no information provided about the estimated number of potentially affected devices worldwide or details about real-world incidents where this issue was exploited.

Recommendations For Bootstrap versions 2.3.0 through 3.3.x, update to version 3.4.0 or later. For Bootstrap versions 3.4.0 through 4.1.1, update to version 4.1.2 or later. As a temporary workaround, consider disabling the use of the data-container property in the tooltip until a patch is available.