CVE-2018-14040by Jeremyin Security Bulletinson Posted on July 13, 2018 In Bootstrap before 4.1.2, XSS is possible in the collapse data-parent attribute.