CVE-2018-20676 Security Details

CVE ID

CVE-2018-20676

CWE

CWE-79

CVE Description

In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.

Published

Jan 14, 2019

CVSS Score & Severity

6.1Medium

CVSS Vector

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS Score

5.541%

Malware

malware

KEV Status

Not in KEV Catalog: No known exploits

Affected Ecosystems

affected

Source

National Vulnerability Database

References

GitHub · Issue #26625PROJECT

GitHub · Issue #26628PROJECT

GitHub · Issue #27044PROJECT

GitHub · Issue #27045PROJECT

GitHub · Issue #27915PROJECT

GitHub · PR #27047PROJECT