Yumeae/Bootstrap-with-XSS

PoC

A poc for Bootstrap XSS(CVE-2024-6485、CVE-2016-10735、CVE-2019-8331、CVE-2018-14040)

view exploit source poc_in_githubauthor Yumeaepublished 2025-07-21catalog poc_in_github

exploited CVEs (4)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2024-6485US	—	0.49% (42nd)	Exploit	2024-07-11
A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute…
CVE-2019-8331US	medium6.1	16.4% (97th)	Exploit	2019-02-20
In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.
CVE-2016-10735US	medium6.1	4.04% (91st)	Exploit	2019-01-09
In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.
CVE-2018-14040US	medium6.1	4.13% (91st)	Exploit	2018-07-13
In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.