CVE-2018-14042by Jeremyin Security Bulletinson Posted on July 13, 2018 In Bootstrap before 4.1.2, XSS is possible in the data-container property of tooltip.