CVE Feed

    Dashboard / CVE / CVE-2019-20921

    CVE-2019-20921

    bootstrap-select before 1.13.6 allows Cross-Site Scripting (XSS). It does not escape title values in OPTION elements. This may allow attackers to execute arbitrary JavaScript in a victim's browser.

    Published:Feb 14, 2019
    Last Modified:Nov 25, 2024
    EPS:Sep 30, 2020
    EPSS Score:0.00545
    CVSS Score:6.1

    Affected Products

    Vendor
    Redhat
    Product
    Rhev Manager
    Vendor
    Snapappointments
    Product
    Bootstrap-select

    Exploits

    No exploit reference

    Related CVEs

    CVE-2024-0822 (CVSS 7.5) — An authentication bypass vulnerability was found in overt-engine. This flaw allows the creation of users in th…
    CVE-2023-20861 (CVSS 6.5) — In Spring Framework versions 6.0.0 - 6.0.6, 5.3.0 - 5.3.25, 5.2.0.RELEASE - 5.2.22.RELEASE, and older unsuppor…
    CVE-2023-20860 (CVSS 7.5) — Spring Framework running version 6.0.0 - 6.0.6 or 5.3.0 - 5.3.25 using "**" as a pattern in Spring Security co…
    CVE-2022-41946 (CVSS 4.7) — pgjdbc is an open source postgresql JDBC Driver. In affected versions a prepared statement using either `Prepa…
    CVE-2022-45047 (CVSS 9.8) — Class org.apache.sshd.server.keyprovider.SimpleGeneratorHostKeyProvider in Apache MINA SSHD <= 2.9.1 uses Java…
    CVE-2022-31129 (CVSS 7.5) — moment is a JavaScript date library for parsing, validating, manipulating, and formatting dates. Affected vers…
    CVE-2022-31051 (CVSS 4.4) — semantic-release is an open source npm package for automated version management and package publishing. In aff…
    CVE-2022-2806 (CVSS 5.5) — It was found that the ovirt-log-collector/sosreport collects the RHV admin password unfiltered. Fixed in: sos-…
    CVE-2022-2805 (CVSS 6.5) — A flaw was found in ovirt-engine, which leads to the logging of plaintext passwords in the log file when using…
    CVE-2022-24903 (CVSS 8.1) — Rsyslog is a rocket-fast system for log processing. Modules for TCP syslog reception have a potential heap buf…

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High