2018-07-13 14:00:00
mitre
PUBLISHED
In Bootstrap before 4.1.2, XSS is possible in the data-target property of scrollspy.