CVE-2016-10735.yml

---
gem: bootstrap-sass
cve: 2016-10735
ghsa: 4p24-vmcr-4gqj
url: https://blog.getbootstrap.com/2018/12/13/bootstrap-3-4-0/
title: XSS vulnerability via data-target in bootstrap-sass
date: 2016-07-27
description: |
  In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2,
  XSS is possible in the data-target attribute.
cvss_v2: 4.3
cvss_v3: 6.1
patched_versions:
  - ">= 3.4.0"
related:
  url:
    - https://github.com/twbs/bootstrap/issues/20184