CVE-2019-10215: Bootstrap-3-Typeahead Project Bootstrap-3-Typeahead

Medium severity, CVSS 6.1. EPSS: 1.5% chance of exploitation in the next 30 days.

Bootstrap-3-Typeahead after version 4.0.2 is vulnerable to a cross-site scripting flaw in the highlighter() function. An attacker could exploit this via user interaction to execute code in the user's browser.

Affected products

• Bootstrap-3-Typeahead Project Bootstrap-3-Typeahead: after 4.0.2

Published 2019-10-08. Last modified 2026-06-17.