CVE-2025-1647

A security vulnerability has been identified in the Bootstrap framework. This flaw allows for the execution of arbitrary JavaScript code within a user's web browser. This can occur when user-supplied input is not properly sanitized during the generation of web pages utilizing Bootstrap components. Successful exploitation could enable attackers to perform a variety of client-side attacks, potentially leading to data theft, session hijacking, defacement, or other malicious activities within the context of the affected user's browser session.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.