I found that Bootstrap 3.3.7 is vulnerable to Cross-Site Scripting (XSS) via the data-target, data-template, data-content, data-title and data-viewport attributes. How can I inject the XSS into these particular attributes?
closed as off-topic by Conor Mancone, MechMK1, Xander, Benoit Esnard, multithr3at3d Aug 9 at 21:00
This question appears to be off-topic. The users who voted to close gave this specific reason:
- "Questions asking us to break the security of a specific system for you are off-topic unless they demonstrate an understanding of the concepts involved and clearly identify a specific problem." – Conor Mancone, MechMK1, Xander, Benoit Esnard, multithr3at3d