Read the docs

Bootstrap

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Bootstrap records in CISA KEV

No Bootstrap vulnerabilities are listed in CISA KEV.

Records

3 records

TI-2024-06015 CVE-2024-6485 · GHSA-vxmc-5x29-h64v

XSS in Bootstrap button component

Priority MEDIUM 62

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks.

CVSS 3.1MEDIUM 6.4 Network No auth User interaction EPSS 0.00494 Published 2024-07-11 Partial fix CWE-79
Priority MEDIUM 58

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site Scripting (XSS).This issue affects Bootstrap: from 3.4.1 before 4.0.0.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.00432 Published 2025-05-15 Partial fix · 4.0.0 CWE-79
Open these records in search →