Skip to content
OpenAdvisories

Package · npm

bootbox

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Medium 6.1
    CVE-2023-46998 Public exploit

    Bootbox.js Cross Site Scripting vulnerability

    Cross Site Scripting vulnerability in BootBox Bootbox.js v.3.2 through 6.0 allows a remote attacker to execute arbitrary code via a crafted payload to alert(), confirm(), prompt() functions.

    bootbox libjs-bootbox libjs-bootbox Debian Ubuntu npm
  • Medium —
    GHSA-87mg-h5r3-hw88

    Cross-Site Scripting in bootbox

    All version of `bootbox` are vulnerable to Cross-Site Scripting. The package does not sanitize user input in the provided dialog boxes, allowing attackers to inject HTML code and execute arbitrary JavaScript. ## Recommendation Sanitize user input being passed…

    bootbox npm