CVE-2016-10735 (bootstrap): XSS vulnerability via data-target in bootstrap

CVE: CVE-2016-10735 ( NVD )
GHSA: GHSA-4p24-vmcr-4gqj
Vendor Advisory: https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2/

XSS vulnerability via data-target in bootstrap

Published: July 27, 2016

CVSS v3.x: 6.1 (Medium)

CVSS v2.0: 4.3 (Medium)

>= 4.0.0-beta.2

In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute.