XSS possible in data-target property of scrollspy

Created by: 1Jesper1

XSS possible in scrollspy data-target attribute data-target="<img src=1 onerror=alert(123) />" Bootstrap 4.1.1 in combination with JQuery 3.3.1