GHSA-q58r-hwc8-rm9jPublished
XSS in Bootstrap title attribute for Tooltip and Popover
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2025-1647 · Microsoft / collected KEV context
cve-program · CVE-2025-1647
euvd · EUVD-2025-15170
nvd · CVE-2025-1647
- https://www.herodevs.com/vulnerability-directory/cve-2025-1647
- https://lists.debian.org/debian-lts-announce/2025/06/msg00001.html
- https://lists.debian.org/debian-lts-announce/2026/10/msg00023.html
osv · GHSA-q58r-hwc8-rm9j
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.