Kevin Van Hulst

**Name of the Vulnerable Software and Affected Versions** Backdrop CMS Bootstrap 5 Lite theme version 1.x-1.0.2 and earlier **Description** A cross-site scripting (XSS) issue was found due to insufficient sanitization of certain class names. **Recommendations** For Backdrop CMS Bootstrap 5 Lite theme version 1.x-1.0.2 and earlier, update to version 1.x-1.0.3 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Backdrop CMS Bootstrap Lite theme versions prior to 1.x-1.4.5 **Description** A cross-site scripting (XSS) issue was found due to insufficient sanitization of certain class names. **Recommendations** For versions prior to 1.x-1.4.5, update to version 1.x-1.4.5 or later to resolve the issue.