Materializecss

Records4All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Materializecss records in CISA KEV

No Materializecss vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Materialize 4 records LOW

Records

4 records in Materialize · all components

TI-2019-08222 CVE-2019-11004 · GHSA-rg3q-jxmp-pvjj

In Materialize through 1.0.0, XSS is possible via the Toast feature.

LOW 29

In Materialize through 1.0.0, XSS is possible via the Toast feature.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00792 Published 2019-04-08 Fixed in 1.1.0-alpha CWE-79

TI-2019-08221 CVE-2019-11003 · GHSA-7752-f4gf-94gc

In Materialize through 1.0.0, XSS is possible via the Autocomplete feature.

LOW 29

In Materialize through 1.0.0, XSS is possible via the Autocomplete feature.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00788 Published 2019-04-08 Fixed in 1.1.0-alpha CWE-79

TI-2019-08220 CVE-2019-11002 · GHSA-98f7-p5rc-jx67

In Materialize through 1.0.0, XSS is possible via the Tooltip feature.

LOW 29

In Materialize through 1.0.0, XSS is possible via the Tooltip feature.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00795 Published 2019-04-08 Fixed in 1.1.0-alpha CWE-79

TI-2022-09038 CVE-2022-25349 · GHSA-7jvx-f994-rfw2

Cross-site scripting (XSS) in materialize-css

LOW 27

All versions of package materialize-css are vulnerable to Cross-site Scripting (XSS) due to improper escape of user input (such as <not-a-tag />) that is being parsed as HTML/JavaScript, and inserted into the Docum…

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.01046 Published 2022-05-01 No fix listed CWE-79

Open these records in search →

Critical	0
High	0
Medium	4
Low	0
No CVSS	0