View at Official debian advisory, NVD, CVE.org · CVE detail
Freshness: upstream tracker timestamp is available; use API updated time as primary recency signal.
CVE-2016-10735 unimportant priority: Debian including 2 source packages (twitter-bootstrap3, twitter-bootstrap4), 10 status rows across 5 suites (bookworm, bullseye, forky, sid, trixie): resolved 10.
In Bootstrap 3.x before 3.4.0 and 4.x-beta before 4.0.0-beta.2, XSS is possible in the data-target attribute, a different vulnerability than CVE-2018-14041.