Software age

Update old Bootstrap code

Why this matters

Bootstrap is shared code for page layouts and controls. The version flagged by the checker has a cross-site scripting flaw, where harmful code can run in a visitor's browser: CVE-2019-8331.

What to do

1. Back up the site and identify the theme or add-on that supplies Bootstrap. A theme controls the design; an add-on provides extra features.
2. Ask for an update to Bootstrap 3.4.1, 4.3.1 or later, or 5.x. Test on a copy first; moving from version 3 to 4 or 5 can need layout changes.
3. What to tell your web developer: The checker flagged Bootstrap for CVE-2019-8331. Please update to 3.4.1, 4.3.1 or later, or 5.x, and test layouts, menus and other controls before publishing.

How to check the fix

Check the layout on a phone and desktop, then run the checker again. It should no longer flag Bootstrap for the flaw it checks.