Reading sensitive information displayed on the page.

Understanding what affected older versions can help you write more secure code in 5.1.3. Vulnerability Type Description Affected Versions (Fixed in 5.x)

Notably, the official release notes made of fixing a remote code execution (RCE) or cross-site scripting (XSS) vulnerability. This is critical to understand: 5.1.3 was a maintenance release, not an emergency security patch.

A known vulnerability in the scrollspy.js component where the target option is not properly sanitized. A malicious actor can inject and execute arbitrary JavaScript by manipulating this property.