Getbootstrap · weakness class

Cross-site Scripting

7 CVEs

Every dot is a CVE in what this vendor ships; the named ones are the most at risk.

Connect AI

likely to be exploited: 1

Every one of the 7 is a mark on the map. Named now: 1 to 7, most at risk first.

In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.CVE-2019-8331Getbootstrap · 16% likely
CWE-79 2 bounty reports
In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.CVE-2018-14041Getbootstrap · 4.3% likely
CWE-79 1 bounty report
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.CVE-2018-14040Getbootstrap · 4.1% likely
CWE-79 1 bounty report
In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.CVE-2016-10735Getbootstrap · 4.0% likely
CWE-79
In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.CVE-2018-14042Getbootstrap · 4.0% likely
CWE-79 1 bounty report
In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.CVE-2018-20677Getbootstrap · 4.0% likely
CWE-79
In Bootstrap before 3.4.0, XSS is possible in the tooltip data-viewport attribute.CVE-2018-20676Getbootstrap · 3.8% likely
CWE-79

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.

Data as of 2026-11-15. CVE List through 2026-11-15 · EPSS of 2026-11-15 · CISA KEV checked 2026-11-15. Sources: the CVE List, CISA KEV, EPSS, NVD, nuclei templates and public bug bounty data.