Skip to content
KitploitKITPLOIT
ToolsBlog
Submit
ToolsBlog
Submit

Hacking, PenTest, and Cybersecurity Tools for Your Security Arsenal!

Kitploit is a directory of hacking, cybersecurity, and pentesting tools. Discover the latest project updates to find vulnerabilities, analyze systems, automate testing, and strengthen your security.

··Feeds·Contact·Privacy·© 2026 Kitploit

Tool Directory

Categories

View all categories
Loading categories
Bootstrap-with-XSS — A poc for Bootstrap XSS(CVE-2024-6485、CVE-2016-10735、CVE-2019-8331、CVE-2018-14040) | Kitploit
Tools/GitHubGitHub/yumeae/bootstrap-with-xss
Vulnerability AnalysisWeb Application ExploitationWeb SecurityCTFLearning & EducationLabs & Practice
GitHubyumeae/bootstrap-with-xss

Bootstrap-with-XSS

A poc for Bootstrap XSS(CVE-2024-6485、CVE-2016-10735、CVE-2019-8331、CVE-2018-14040)

View Repository
41 year agoNot yet reviewed

Most Popular

View all →

Discover the most used tools by our community.

Explore all tools

Browse our collection of tools

View all tools →
Share

Bootstrap Historical Vulnerability PoC Collection

This is a static HTML page for learning and research, which integrates multiple Proof of Concept (PoC) exploits for Cross-Site Scripting (XSS) vulnerabilities in the historical versions of the Bootstrap framework.

This project aims to provide security researchers, developers, and students with a safe, controlled environment to understand and verify these specific security vulnerabilities without the need to set up a complex server environment.

⚠️ Important Security Warning

  • For learning and research only: This project and all its code are intended solely for authorized, legitimate security research and educational purposes.
  • No illegal attacks: It is strictly prohibited to use this tool or any code contained herein to test or attack any website that you do not own or have not been explicitly authorized to test. Unauthorized penetration testing is illegal.
  • Use at your own risk: You bear full responsibility for all consequences arising from the use of this project.

🚀 Features and Included PoCs

  • Single Static File: All functionality is integrated into a single HTML file, requiring no backend or database.
  • Manual Version Switching: By simply modifying comments in the HTML file, you can reliably switch between different Bootstrap vulnerability library versions.
  • Re-triggerable: Some PoCs are optimized to be triggered repeatedly, facilitating observation and analysis.
  • Clear Vulnerability Identification: Each PoC is explicitly marked with its corresponding CVE vulnerability identifier.

PoC List

🛠️ How to Use

  1. Get the file: Download or clone this project to obtain the test.html file.
  2. Edit the file: Open test.html with any text editor (e.g., VS Code, Sublime Text, Notepad, etc.).
  3. Select the library version:
    • In the <head> section of the file, paste the URL of the corresponding version based on the PoC you want to test (refer to the table above).
  4. Save and open: Save your modified test.html file.
  5. Open in a browser: Open this local HTML file using your browser.
  6. Trigger the PoC: Interact with the corresponding PoC element on the page (e.g., hover or click) to trigger the vulnerability.

📜 License

This project is licensed under the MIT License.

Download Tool
PoC #Vulnerability ID (CVE ID)Vulnerability DescriptionAffected Library Versions (Range)
1CVE-2019-8331Unsanitized data-template attribute in Tooltip component leading to XSSv4.x < v4.3.1 and v3.x < v3.4.1
2CVE-2018-14040Unsanitized data-parent attribute in Collapse component leading to XSSv4.x < v4.1.2
3CVE-2016-10735Unsanitized data-target attribute in Modal component leading to XSSv3.x < v3.4.0
4CVE-2024-6485Unsanitized data-loading-text attribute in Button plugin leading to XSSv3.x < v3.4.1