PT-2026-120913
CVE-2026-114538
·
Published
2026-10-21
·
Updated
2026-10-21
Description by
Score
N/A
Not availableNo severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Provides the Bootstrap front-end framework as a Drupal theme.
Bootstrap theme did not sufficiently filter certain attributes, which could lead to a cross-site scripting vulnerability.
This vulnerability is mitigated by only affecting the optional tooltip and popover features. A short-term mitigation is to disable tooltips and popovers on
admin/appearance/settings/bootstrap or admin/appearance/settings/my bootstrap subtheme. Found an issue in the description? Have something to add? Feel free to write us 👾