Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2019-20921
6.1
MEDIUMCVSS v3
Published
September 30, 2020
CVSS v2
4.3 MEDIUM
Affected
1 project
Assigned by
MITRE
Severity scale
010
Description
bootstrap-select before 1.13.6 allows Cross-Site Scripting (XSS). It does not escape title values in OPTION elements. This may allow attackers to execute arbitrary JavaScript in a victim's browser.
snapappointments/bootstrap-select
GitHub:rocket: The jQuery plugin that brings select elements into the 21st century with intuitive multiselection, searching, and much more.
GitHub:rocket: The jQuery plugin that brings select elements into the 21st century with intuitive multiselection, searching, and much more.< 1.13.6NVD