Exposure of Bootstrap
UI frameworks58
exposure score
2,235,330
sites use
0
exploited
1
critical
CVEs
64 resultsCVE-2021-23472LOWCross-site Scripting (XSS)EPSS 2.4%CVE-2019-10215MEDIUMBootstrap-3-Typeahead after version 4.0.2 is vulnerable to a cross-site scripting flaw in the highlighter() function. An attacker could explEPSS 1.5%CVE-2021-23398MEDIUMCross-site Scripting (XSS)EPSS 1.3%CVE-2024-13545CRITICALBootstrap Ultimate <= 1.4.9 - Unauthenticated Limited Local File InclusionEPSS 1.3%CVE-2025-32672HIGHWordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.9 - Local File Inclusion VulnerabilityEPSS 1.0%CVE-2021-21365MEDIUMCross-Site Scripting in Content RenderingEPSS 0.9%CVE-2022-1726MEDIUMBootstrap Tables XSS vulnerability with Table Export plug-in when exportOptions: htmlContent is true in wenzhixin/bootstrap-tableEPSS 0.9%CVE-2026-14637HIGHkirilkirkov Ecommerce-CodeIgniter-Bootstrap ShoppingCart.php getCartItems deserializationEPSS 0.8%CVE-2024-7067MEDIUMkirilkirkov Ecommerce-Laravel-Bootstrap Cart.php getCartProductsIds deserializationEPSS 0.8%CVE-2025-9991HIGHTiny Bootstrap Elements Light <= 4.3.34 - Unauthenticated Local File InclusionEPSS 0.7%CVE-2026-14635MEDIUMkirilkirkov Ecommerce-CodeIgniter-Bootstrap Vendor Multi-Image Endpoint AddProduct.php path traversalEPSS 0.6%CVE-2024-53824HIGHWordPress All Bootstrap Blocks plugin <= 1.3.20 - Local File Inclusion vulnerabilityEPSS 0.6%CVE-2024-43140HIGHWordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.4 - Local File Inclusion vulnerabilityEPSS 0.6%CVE-2024-37462HIGHWordPress Ultimate Bootstrap Elements for Elementor plugin <= 1.4.2 - Local File Inclusion vulnerabilityEPSS 0.6%CVE-2025-3060MEDIUMFlattern – Multipurpose Bootstrap Business Profile - Critical - Unsupported - SA-CONTRIB-2025-005EPSS 0.5%CVE-2022-4834MEDIUMCPT Bootstrap Carousel <= 1.12 - Contributor+ Stored XSS via ShortcodeEPSS 0.5%CVE-2024-6526MEDIUMCodeIgniter Ecommerce-CodeIgniter-Bootstrap cross site scriptingEPSS 0.5%CVE-2024-1398MEDIUMUltimate Bootstrap Elements for Elementor <= 1.3.6 - Authenticated (Contributor+) Stored Cross-Site ScriptingEPSS 0.5%CVE-2024-6485MEDIUMXSS in Bootstrap button componentEPSS 0.5%CVE-2026-14634MEDIUMkirilkirkov Ecommerce-CodeIgniter-Bootstrap Subscribed Emails Admin MY_Controller.php checkForPostRequests cross site scriptingEPSS 0.5%