https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-12T12:47:06.290387+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2024-6485 CVE-2024-6485 — XSS in Bootstrap button component 2026-10-12T12:47:06.325826+00:00

Affected: Bootstrap, bootstrap-sass, getbootstrap bootstrap

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribute, which would then be executed when the button's loading state is triggered.

 https://cve.radiocsirt.org/vuln/usn-7556-1 USN-7556-1 — twitter-bootstrap3, twitter-bootstrap4 vulnerabilities 2026-10-12T12:47:06.325891+00:00

Affected: Ubuntu:Pro:16.04:LTS: twitter-bootstrap3, Ubuntu:Pro:18.04:LTS: twitter-bootstrap3, Ubuntu:Pro:20.04:LTS: twitter-bootstrap3, Ubuntu:Pro:20.04:LTS: twitter-bootstrap4, Ubuntu:22.04:LTS: twitter-bootstrap3, Ubuntu:Pro:22.04:LTS: twitter-bootstrap4, Ubuntu:24.04:LTS: twitter-bootstrap3, Ubuntu:24.04:LTS: twitter-bootstrap4

It was discovered that Bootstrap did not correctly sanitize certain input in the carousel component. An attacker could possibly use this issue to execute a cross-site scripting (XSS) attack. (CVE-2024-6484, CVE-2024-6531)

It was discovered that Bootstrap did not correctly sanitize certain input in the button plugin. An attacker could possibly use this issue to execute a cross-site scripting (XSS) attack. (CVE-2024-6485)