bootstrap-select before 1.13.6 allows Cross-Site Scripting (XSS)
published September 30, 2020
CVSS
—
EPSS
2%
Percentile
77.5
In the wild
Unconfirmed
What it is
bootstrap-select before 1.13.6 allows Cross-Site Scripting (XSS). It does not escape title values in OPTION elements. This may allow attackers to execute arbitrary JavaScript in a victim's browser.
The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01738 · 77.5th percentile
Published
2020-09-30T12:30Z
EPSS history
Timeline
30 SEP 12:30Z
bootstrap-select before 1.13.6 allows Cross-Site Scripting (XSS)