Practical Security Guides For Your Team

Your website uses an outdated version of Bootstrap — a popular design toolkit used by millions of websites. The version in use has a known flaw in its collapsible panel feature that could allow someone to inject malicious code into your pages if they can influence the content on your site. This is a medium-priority issue: it requires specific conditions to exploit, but it is a well-documented vulnerability with a straightforward fix.

Your website uses an old version of Bootstrap (a popular design toolkit) that has a known security flaw. A specific button feature in this version doesn't properly filter out malicious code, meaning that if any user-supplied text ever reaches those buttons, it could run unwanted scripts in your visitors' browsers. Bootstrap 3 is also no longer maintained, so no official fix will be released for this version.

Your website is using an old version of a very common JavaScript tool called jQuery (version 3.3.1). This version has a known flaw that can allow an attacker to sneak malicious code onto your web pages, which then runs in your visitors' browsers. The fix is straightforward: update jQuery to a newer version.