cve/2016/CVE-2016-10735.md

CVE-2016-10735

Description

In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.

POC

Reference

• https://access.redhat.com/errata/RHSA-2020:0133
• https://access.redhat.com/errata/RHSA-2020:0133

Github

• https://github.com/ARPSyndicate/cvemon
• https://github.com/aemon1407/KWSPZapTest
• https://github.com/ossf-cve-benchmark/CVE-2016-10735