Non évaluée
Provides the Bootstrap front-end framework as a Drupal theme. Bootstrap theme did not sufficiently filter certain attributes, which could lead to a c...
CVE-2026-114538
Première détection SecPulse
Paquets affectés
| Écosystème | Paquet | Concernées | Corrigé |
|---|---|---|---|
| Packagist:https://packages.drupal.org/8 | drupal/bootstrap |
< 3.45.0 |
3.45.0 |
Description d'origine La description telle que publiée par la source (souvent en anglais).
Provides the Bootstrap front-end framework as a Drupal theme.
Bootstrap theme did not sufficiently filter certain attributes, which could lead to a cross-site scripting vulnerability.
This vulnerability is mitigated by only affecting the optional tooltip and popover features. A short-term mitigation is to disable tooltips and popovers on admin/appearance/settings/bootstrap or admin/appearance/settings/my_bootstrap_subtheme.
Références
- web drupal.org