CVE-2019-8331

MEDIUM 6.1EPSS 16.4%

In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.

CVSS v3.1: 6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v3.1: 6.1 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CVSS v2.0: 4.3 MEDIUMAV:N/AC:M/Au:N/C:N/I:P/A:N
EPSS: 16.40% chance of exploitation in the next 30 days, 97th percentile
Published: 2019-02-20
Updated: 2024-08-04

Proof-of-concept exploits (4)

Snorlyd/https-nj.gov---CVE-2019-83310★ · 2022-05-23
Thampakon/CVE-2019-83310★ · 2023-09-11
Yumeae/Bootstrap-with-XSS4★ · 2025-08-21
ossf-cve-benchmark/CVE-2019-83310★ · 2020-12-08

References

Related