{"id":"EUVD-2025-15170","revision":"b8d1ed2902a849c19ca1ff25b653cf59","records":[{"revision":"b8d1ed2902a849c19ca1ff25b653cf59","observedAt":"2026-11-03T00:01:09.423+00:00","statement":{"source":"euvd","id":"EUVD-2025-15170","aliases":["CVE-2025-1647","GHSA-q58r-hwc8-rm9j"],"title":"Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site Scripting (XSS).This issue affects Bootstrap: from 3.4.1 before 4.0.0.","description":"Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site Scripting (XSS).This issue affects Bootstrap: from 3.4.1 before 4.0.0.","state":0,"publishedAt":null,"modifiedAt":null,"affected":[],"metrics":[{"system":"EUVD CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L","score":5.6,"severity":null}],"references":["https://www.herodevs.com/vulnerability-directory/cve-2025-1647"],"sourceUrl":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-15170","license":"ENISA EUVD · source terms and attribution apply","enrichment":{"sourceStatus":null,"weaknesses":[],"productCriteria":[],"sourceDates":{"datePublished":"May 15, 2025, 4:26:07 PM","dateUpdated":"Oct 9, 2026, 9:12:09 AM"},"relatedAdvisories":[{"id":"WID-SEC-W-2025-1072","title":"Bootstrap: Schwachstelle ermöglicht Cross-Site Scripting","vulnerabilityIds":["CVE-2025-1647"]}],"note":"EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON."},"key":"euvd:EUVD-2025-15170","identifiers":["EUVD-2025-15170","CVE-2025-1647","GHSA-q58r-hwc8-rm9j"]},"retained":false,"historicalAffected":[]}],"coverage":[]}