Practical Security Guides For Your Team

Your website uses an outdated version of Bootstrap — a popular design toolkit — that has a known security flaw. A malicious actor who can influence tooltip or popover content on your site could use this flaw to run unwanted code in a visitor's browser. The fix is a straightforward library upgrade.

Your website is using an old version of Bootstrap (a popular design toolkit), which has a known security flaw in its tooltip feature. An attacker who can influence the content of a tooltip on your page could use it to run malicious code in your visitors' browsers. Upgrading Bootstrap to a patched version fully resolves this.

Your website is using an old version of Bootstrap (a popular design toolkit), which contains a known security flaw. The flaw could allow someone to inject malicious code into a tooltip element on your site — but only if they can also control the content of that tooltip. This is a medium-priority issue: worth fixing on your next development cycle, but not an emergency.