bootstrap-switch@2.0.1 vulnerabilities

Turn checkboxes and radio buttons into toggle switches.

3.4.0

11 years ago

6 years ago

Known vulnerabilities in the bootstrap-switch package. This does not include vulnerabilities belonging to this package’s dependencies.

Snyk's AI Trust Platform automatically finds the best upgrade path and integrates with your development workflows. Secure your code at zero cost.

Vulnerability Vulnerable Version

Vulnerability	Vulnerable Version
H Cross-site Scripting (XSS) bootstrap-switch is a package that helps you turn checkboxes and radio buttons into toggle switches. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) when switches based on user submitted configuration are allowed. PoC by jwcooper https://jsfiddle.net/876myrk5/ How to fix Cross-site Scripting (XSS)? A fix was pushed into the `master` branch but not yet published.	*

bootstrap-switch is a package that helps you turn checkboxes and radio buttons into toggle switches.

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) when switches based on user submitted configuration are allowed.

How to fix Cross-site Scripting (XSS)?

A fix was pushed into the master branch but not yet published.