affix - XSS on target config #27045
Comments
don-spyker
added a commit
to don-spyker/bootstrap
that referenced
this issue
Aug 10, 2018
Johann-S
pushed a commit
that referenced
this issue
Aug 13, 2018
* fix(collapse): xss CVE-2018-14040 Fixes #26625 * fix(tooltip): xss CVE-2018-14042 Fixes #26628 * fix(tooltip): XSS on data-viewport attribute Fixes #27044 * fix(affix): XSS on target config Fixes #27045
holatuwol
added a commit
to holatuwol/clay
that referenced
this issue
Mar 26, 2021
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
found in bootstrap 3.3.7
$('.js-affixed-element-top').affix({ offset: { top: $('.js-page-header').outerHeight(true) - 10 , bottom: $('.js-footer').outerHeight(true) + 10 }, target: '<img src=x onerror=alert(0)>' })https://jsbin.com/palokaxina/edit?html,output
Win 7 x64
Chrome 67.0.3396.99
Firefox 61.0.1 (64-Bit)
The text was updated successfully, but these errors were encountered: