CVE-2016-10735.yml

---
gem: bootstrap
cve: 2016-10735
ghsa: 4p24-vmcr-4gqj
url: https://blog.getbootstrap.com/2018/07/12/bootstrap-4-1-2/
title: XSS vulnerability via data-target in bootstrap
date: 2016-07-27
description: |
  In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2,
  XSS is possible in the data-target attribute.
cvss_v2: 4.3
cvss_v3: 6.1
patched_versions:
  - ">= 4.0.0-beta.2"
related:
  url:
    - https://github.com/twbs/bootstrap/issues/20184