Known vulnerabilities in Bootstrap

Vendor: Bootstrap
Software: Bootstrap
Software CPE: cpe:2.3:a:twbs:bootstrap:*:*:*:*:*:*:*:*
Total vulnerabilities: 11
Public exploits: 0
Known exploited (KEV): 0
Highest CVSSv4 Score: 6.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Bootstrap Bootstrap is affected by 11 known vulnerabilities: 3 medium, 8 low Critical High Medium Low

Vulnerabilities (11)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU117335 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2025-1647
CWE-79 Medium
No
No
4 17.10.2025 SB2025101709
SB2025112023
SB2026062237
#VU97688 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-6485
CWE-79 Medium
No
No
4.0.0 25.09.2024 SB2024092512
SB20241230139
SB2025060920
and 3 more
#VU97687 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2024-6484
CWE-79 Medium
No
No
4.0.0 25.09.2024 SB2024092512
SB20241230139
SB2025060920
and 3 more
#VU21707 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2016-10735
CWE-79 Low
No
No
3.4.0 10.10.2019 SB2019010911
SB2019101009
SB2020093090
and 21 more
#VU17694 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2019-8331
CWE-79 Low
No
No
3.4.1, 4.3.1 14.02.2019 SB2019021412
SB2019031501
SB2019101009
and 28 more
#VU16956 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20676
CWE-79 Low
No
No
3.4.0, 4.0.0 beta.2 13.01.2019 SB2018121404
SB2019101009
SB2020093090
and 18 more
#VU16542 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-20677
CWE-79 Low
No
No
3.4.0, 4.0.0 beta.2 14.12.2018 SB2018121404
SB2019101009
SB2020093090
and 18 more
#VU13903 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14041
CWE-79 Low
No
No
4.1.2 18.07.2018 SB2018071803
SB2019031501
SB2023013124
and 8 more
#VU13902 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14042
CWE-79 Low
No
No
4.1.2 18.07.2018 SB2018071803
SB2020093090
SB2020110508
and 22 more
#VU13901 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2018-14040
CWE-79 Low
No
No
4.1.2 17.07.2018 SB2018071803
SB2019031501
SB2020093090
and 24 more
#VU8607 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CWE-79 Low
No
No
- 10.04.2017 SB2017041002