CVEvulnerability

CVE-2024-6485

6.4 MEDIUM Published 2024-07-11 Modified 2026-06-17 Official page ↗
Status
Deferred
Published
2024-07-11
Last modified
2026-06-17
Assigner
36c7be3b-2937-45df-85ea-ca7133ea542c
CVSS 3.1 (36c7be3b-2937-45df-85ea-ca7133ea542c)
6.4 MEDIUM — CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L
Weaknesses
CWE-79

Description

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribute, which would then be executed when the button's loading state is triggered.

Related

Weakness · CWE (1)

  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References