bootstrap-switch@3.3.4 vulnerabilities

Turn checkboxes and radio buttons into toggle switches.

latest version

3.4.0
first published

11 years ago
latest version published

6 years ago
licenses detected
- Apache-2.0
  >=2.0.1 <3.3.5; >=4.0.0-alpha.1
View bootstrap-switch package health on Snyk Advisor Open this link in a new tab

Known vulnerabilities in the bootstrap-switch package. This does not include vulnerabilities belonging to this package’s dependencies.

Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

Vulnerability Vulnerable Version

Vulnerability	Vulnerable Version
H Cross-site Scripting (XSS) bootstrap-switch is a package that helps you turn checkboxes and radio buttons into toggle switches. Affected versions of this package are vulnerable to Cross-site Scripting (XSS) when switches based on user submitted configuration are allowed. PoC by jwcooper https://jsfiddle.net/876myrk5/ How to fix Cross-site Scripting (XSS)? A fix was pushed into the `master` branch but not yet published.	*

bootstrap-switch is a package that helps you turn checkboxes and radio buttons into toggle switches.

Affected versions of this package are vulnerable to Cross-site Scripting (XSS) when switches based on user submitted configuration are allowed.

How to fix Cross-site Scripting (XSS)?

A fix was pushed into the master branch but not yet published.