Vulnerability Database

296,746

Total vulnerabilities in the database

CVE-2025-1647

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site Scripting (XSS).This issue affects Bootstrap: from 3.4.1 before 4.0.0.

Published: May 15, 2025
Updated: Sep 19, 2025
CVE: CVE-2025-1647
GHSA: GHSA-q58r-hwc8-rm9j
Severity: Medium
Exploit:

CVSS v3:

Severity: Unknown
Score:
AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:L

CWEs:

CWE-79

OWASP TOP 10:

A7 - Cross-Site Scripting (XSS)

Affected Software
References

Software	From	Fixed in
@lerna / bootstrap	3.4.1	3.4.1.x

https://lists.debian.org/debian-lts-announce/2025/06/msg00001.html
https://www.herodevs.com/vulnerability-directory/cve-2025-1647

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime

Book a Demo