CVE-2025-1647 — XSS in Bootstrap title attribute for Tooltip and Popover

CVE-2025-1647

XSS in Bootstrap title attribute for Tooltip and Popover PUBLISHED

Description (CNA)

Improper Neutralization of Input During Web Page Generation (XSS or 'Cross-site Scripting') vulnerability in Bootstrap allows Cross-Site Scripting (XSS).This issue affects Bootstrap: from 3.4.1 before 4.0.0.

Affected (CNA)

Vendor / product	Versions
Bootstrap / Bootstrap	affected 3.4.1 before 4.0.0

CWE

CWE-79

References

https://www.herodevs.com/vulnerability-directory/cve-2025-1647

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

CVE

No English description supplied.

https://lists.debian.org/debian-lts-announce/2025/06/msg00001.html
https://lists.debian.org/debian-lts-announce/2026/10/msg00023.html