PT-2024-37693
CVE-2024-6531
·
Published
2024-07-11
·
Updated
2026-07-15
Description by
CVSS 3.1
6.4
MediumMetricsAV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L
Name of the Vulnerable Software and Affected Versions
Bootstrap (affected versions not specified)
Description
A vulnerability has been identified in Bootstrap that exposes users to Cross-Site Scripting (XSS) attacks. The issue is present in the carousel component, where the
data-slide and data-slide-to attributes can be exploited through the href attribute of an tag due to inadequate sanitization. This could potentially enable attackers to execute arbitrary JavaScript within the victim's browser.Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾