VYPR
← All advisories
Medium severity6.4GHSA Advisory· Published Jul 11, 2024· Updated Jun 17, 2026

CVE-2024-6485

CVE-2024-6485

Description

A security vulnerability has been discovered in bootstrap that could enable Cross-Site Scripting (XSS) attacks. The vulnerability is associated with the data-loading-text attribute within the button plugin. This vulnerability can be exploited by injecting malicious JavaScript code into the attribute, which would then be executed when the button's loading state is triggered.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

PackageAffected versionsPatched versions
bootstrapnpm
>= 1.4.0, <= 3.4.1—

Affected products

35

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.