CVE-2021-23472: 
JavaScript vulnerability analysis and mitigation

A type confusion vulnerability (CVE-2021-23472) was discovered in bootstrap-table versions before 1.19.1. The vulnerability was disclosed on September 22, 2021, and published on November 3, 2021. The vulnerability affects the bootstrap-table package, which is an extended table integration component that supports multiple CSS frameworks including Bootstrap, Semantic UI, Bulma, Material Design, Foundation, and Vue.js (Snyk Report).

The vulnerability stems from a type confusion issue in the escapeHTML function. When the input provided to this function is an array instead of the expected string type, it can lead to a bypass of input sanitization even when the escape attribute is set to true. This creates a potential cross-site scripting (XSS) vulnerability (Snyk Report).

The vulnerability can lead to cross-site scripting (XSS) attacks. When successfully exploited, attackers could potentially steal cookies, hijack user sessions, expose sensitive information, gain access to privileged services and functionality, or deliver malware (Snyk Report).

The recommended mitigation is to upgrade bootstrap-table to version 1.19.1 or higher, which contains the fix for this vulnerability (NVD).