Skip to content
OpenAdvisories

Package · npm

bootstrap-multiselect

1 known vulnerabilities.

1 result · Feed

  • Medium 6.1

    Bootstrap Multiselect Vulnerable to CSRF and Reflective XSS via Arbitrary POST Data

    An issue was discovered in post.php in bootstrap-multiselect (aka Bootstrap Multiselect) 1.1.2. A PHP script in the source code echoes arbitrary POST data. If a developer adopts this structure wholesale in a live application, it could create a Reflective Cros…