Vulnerabilities

TI-2026-06598 CVE-2026-7508 · GHSA-vrmq-3jgw-7gqj

Bootstrap CMS Page Creation show.blade.php code injection

MEDIUM 57

A vulnerability was found in Bootstrap CMS 0.9.0-alpha.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00233 Published 2026-04-30 No fix listed CWE-74

TI-2025-01415 CVE-2025-1647 · GHSA-q58r-hwc8-rm9j

XSS in Bootstrap title attribute for Tooltip and Popover

MEDIUM 58

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site Scripting (XSS).This issue affects Bootstrap: from 3.4.1 before 4.0.0.

CVSS 3.1MEDIUM 5.6 Network No auth No interaction EPSS 0.00432 Published 2025-05-15 Partial fix · 4.0.0 CWE-79

TI-2024-06015 CVE-2024-6485 · GHSA-vxmc-5x29-h64v

XSS in Bootstrap button component

MEDIUM 62

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks.

CVSS 3.1MEDIUM 6.4 Network No auth User interaction EPSS 0.00494 Published 2024-07-11 Partial fix CWE-79

Vulnerabilities

Filters

Bootstrap CMS Page Creation show.blade.php code injection

XSS in Bootstrap title attribute for Tooltip and Popover

XSS in Bootstrap button component