CVE-2019-8331

In Bootstrap before 3.4.1 and 4.3.x before 4.3.1, XSS is possible in the tooltip or popover data-template attribute.


We have discovered 671,814 live websites that are affected by CVE-2019-8331.

Run a Free Instant Scan




Affected Software

Product  Bootstrap
Category UI Frameworks
Vulnerable Domains671,814 live websites (38% of Bootstrap install base)
Vulnerable Versions
  • from * through 3.4.1
  • from 4.3 through 4.3
Vulnerable Versions Count68 versions ( 32% of all versions)



Details

  • Published - Feb 21, 2019
  • Updated - Aug 4, 2024

Website Distribution by Country

Number of websites using CVE-2019-8331
United States250,378 websites



Germany42,605 websites
Cyprus37,062 websites
France29,806 websites
Netherlands26,236 websites
GB24,143 websites
Russia19,591 websites
Japan16,382 websites
Italy15,722 websites
India13,892 websites

Website Distribution by TLD

Number of websites using CVE-2019-8331
.com315,007 websites
.org28,338 websites
.de22,441 websites
.net21,826 websites
.co.uk18,137 websites
.ru16,188 websites
.nl15,790 websites
.com.br12,392 websites
.it12,030 websites
.fr11,850 websites

Vulnerable Versions

Vulnerable versions are highlighted in red

Websites affected by CVE-2019-8331

Top websites that are affected by CVE-2019-8331. Please click on the "Contact us" link to get more information.
DomainCountryRankContacts
********.com United States***
******.com United States***
**.com Singapore***
*********.com Canada***
*******.org United States*,***
****.org France*,***
*******.com United States*,***
****.io United States*,***
***.cn China*,***
*****.com Canada*,***
See full domain list

FAQ

A total of 671,814 websites have been identified as vulnerable to CVE-2019-8331, based on global website indexing conducted by WebTechSurvey.
The Bootstrap is affected by the CVE-2019-8331 vulnerability.
Bootstrap versions up to 4.3 are vulnerable to CVE-2019-8331.
CVE-2019-8331 is resolved in version 4.3 of Bootstrap.

References