cve/2018/CVE-2018-20677.md

CVE-2018-20677

Description

In Bootstrap before 3.4.0, XSS is possible in the affix configuration target property.

POC

Reference

• https://access.redhat.com/errata/RHSA-2020:0133
• https://access.redhat.com/errata/RHSA-2020:0133

Github

• https://github.com/aemon1407/KWSPZapTest
• https://github.com/andersoncontreira/http-tunnel-node
• https://github.com/ossf-cve-benchmark/CVE-2018-20677