Archive
3 November 2021
Vulnerabilities first published on this day (UTC), newest first.
1 result · Clear filters · Feed
-
Low 3.1
Cross-site Scripting (XSS)
This affects versions before 1.19.1 of package bootstrap-table. A type confusion vulnerability can lead to a bypass of input sanitization when the input provided to the escapeHTML function is an array (instead of a string) even if the escape attribute is set.