davidstutz/bootstrap-multiselect

davidstutz/bootstrap-multiselect

GitHubGitHub
GitHubgithub.com
davidstutz.github.iodavidstutz.github.io
Releases22
Frequency7 months 13 hours
Last Release
Stars3.68K
JQuery multiselect plugin based on Twitter Bootstrap.
Log in to subscribe

CVE History

CVEAffectedPublishedCVSS v3CVSS v2
CVE-2025-47204NVD↗
= 1.1.26.1 MEDIUM—

An issue was discovered in post.php in bootstrap-multiselect (aka Bootstrap Multiselect) 1.1.2. A PHP script in the source code echoes arbitrary POST data. If a developer adopts this structure wholesale in a live application, it could create a Reflective Cross-Site Scripting (XSS) vulnerability exploitable through Cross-Site Request Forgery (CSRF).