Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

msrc логотип

CVE-2024-6485

Опубликовано: 06 дек. 2025
Источник: msrc
CVSS3: 6.4
EPSS Низкий

Описание

XSS in Bootstrap button component

EPSS

Процентиль: 34%
0.00135
Низкий

6.4 Medium

CVSS3

Связанные уязвимости

CVSS3: 6.4
ubuntu
больше 1 года назад

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribute, which would then be executed when the button's loading state is triggered.

CVSS3: 6.4
redhat
больше 1 года назад

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribute, which would then be executed when the button's loading state is triggered.

CVSS3: 6.4
nvd
больше 1 года назад

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribute, which would then be executed when the button's loading state is triggered.

CVSS3: 6.4
debian
больше 1 года назад

A security vulnerability has been discovered in bootstrap that could e ...

CVSS3: 6.4
github
больше 1 года назад

Bootstrap Cross-Site Scripting (XSS) vulnerability for data-* attributes

EPSS

Процентиль: 34%
0.00135
Низкий

6.4 Medium

CVSS3