Exposure of Bootstrap

UI frameworks
61
exposure score
2,371,189
sites use
0
exploited
1
critical
Vexday analysis

Com 52 CVEs catalogadas e nenhuma em exploração ativa no catálogo CISA KEV, o Bootstrap apresenta taxa de exploração abaixo da média geral do catálogo, o que sugere menor pressão ofensiva imediata sobre essa tecnologia. O tipo de falha mais comum é CWE-79 (Cross-Site Scripting), padrão esperado em frameworks de front-end e que exige atenção contínua na validação de entradas e saídas no contexto de aplicações web. A CVE mais perigosa identificada atualmente é CVE-2021-23472, com score EPSS de 0,0233, indicando probabilidade de exploração relativamente baixa no curto prazo. O surgimento de 2 novas CVEs nos últimos 90 dias sinaliza que a superfície de ataque ainda está em evolução, recomendando monitoramento contínuo e aplicação das atualizações disponíveis.

CVEs

58 results
CVE-2021-23472LOWCross-site Scripting (XSS)EPSS 2.3%CVE-2019-10215MEDIUMBootstrap-3-Typeahead after version 4.0.2 is vulnerable to a cross-site scripting flaw in the highlighter() function. An attacker could explEPSS 1.5%CVE-2021-23398MEDIUMCross-site Scripting (XSS)EPSS 1.3%CVE-2024-13545CRITICALBootstrap Ultimate <= 1.4.9 - Unauthenticated Limited Local File InclusionEPSS 1.3%CVE-2021-21365MEDIUMCross-Site Scripting in Content RenderingEPSS 0.9%CVE-2025-32672HIGHWordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.9 - Local File Inclusion VulnerabilityEPSS 0.9%CVE-2024-7067MEDIUMkirilkirkov Ecommerce-Laravel-Bootstrap Cart.php getCartProductsIds deserializationEPSS 0.8%CVE-2022-1726MEDIUMBootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in wenzhixin/bootstrap-tableEPSS 0.8%CVE-2025-9991HIGHTiny Bootstrap Elements Light <= 4.3.34 - Unauthenticated Local File InclusionEPSS 0.6%CVE-2026-14637HIGHkirilkirkov Ecommerce-CodeIgniter-Bootstrap ShoppingCart.php getCartItems deserializationEPSS 0.6%CVE-2024-43140HIGHWordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.4 - Local File Inclusion vulnerabilityEPSS 0.6%CVE-2024-53824HIGHWordPress All Bootstrap Blocks plugin <= 1.3.20 - Local File Inclusion vulnerabilityEPSS 0.6%CVE-2024-37462HIGHWordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.2 - Local File Inclusion vulnerabilityEPSS 0.6%CVE-2022-4834MEDIUMCPT Bootstrap Carousel <= 1.12 - Contributor+ Stored XSS via ShortcodeEPSS 0.5%CVE-2024-6526MEDIUMCodeIgniter Ecommerce-CodeIgniter-Bootstrap cross site scriptingEPSS 0.5%CVE-2024-1398MEDIUMUltimate Bootstrap Elements for Elementor <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.5%CVE-2024-6485MEDIUMXSS in Bootstrap button componentEPSS 0.5%CVE-2025-3060MEDIUMFlattern – Multipurpose Bootstrap Business Profile - Critical - Unsupported - SA-CONTRIB-2025-005EPSS 0.5%CVE-2022-4576MEDIUMEasy Bootstrap Shortcode <= 4.5.4 - Contributor+ Stored XSSEPSS 0.5%CVE-2022-4777—Bootstrap Shortcodes <= 3.4.0 - Contributor+ Stored XSS via ShortcodeEPSS 0.5%