---
title: "Bootstrap – XSS Vulnerability On Versions Between 4.0.0 And 4.3.1, On data-template, data-content And data-title Attributes"
description: "Impact Area Security       Severity High       Affected Element **ServiceNow** UI Script **Salesforce** Static Resource Rule number **SN-JSL-BOOTSTRAP-BETWEEN-V400-V431**(for ServiceNow) **SF-JSL-BOOTSTRAP-BETWEEN-V400-V431**(for Salesforce) ## Impact The data-template, data-content and data-title attributes are vulnerable to Cross-Site Scripting attacks in…"
url: "https://community-staging.qualityclouds.com/qcdocs/qc/vulnerabilities-in-open-source-libraries-salesforce/bootstrap-xss-vulnerability-on-versions-between-4-0-0-and-4-3-1-on-data-template-data-content-and-data-title-attributes/"
updated: "2025-03-21"
category: Rules
---

# Bootstrap – XSS Vulnerability On Versions Between 4.0.0 And 4.3.1, On data-template, data-content And data-title Attributes

Impact Area

Security

 

 

 

           Severity

High

 

 

 

           Affected Element

**ServiceNow**

UI Script

**Salesforce**

Static Resource

Rule number

**SN-JSL-BOOTSTRAP-BETWEEN-V400-V431**(for ServiceNow)

**SF-JSL-BOOTSTRAP-BETWEEN-V400-V431**(for Salesforce)

## Impact

The data-template, data-content and data-title attributes are vulnerable to Cross-Site Scripting attacks in versions between 4.0.0 and 4.3.1.

## Remediation

Update bootstrap to the latest version.

### Time to fix

30 min

## References

This rule is linked to [Common Weakness Enumeration CWE-79 Improper Neutralization of Input During Web Page Generation (‘Cross-site Scripting’)](https://cwe.mitre.org/data/definitions/79.html).