Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Materializecss Component: Materialize Clear all filters
TI-2022-09038 CVE-2022-25349 · GHSA-7jvx-f994-rfw2

Cross-site scripting (XSS) in materialize-css

Priority LOW 27

All versions of package materialize-css are vulnerable to Cross-site Scripting (XSS) due to improper escape of user input (such as <not-a-tag />) that is being parsed as HTML/JavaScript, and inserted into the Docum…

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.01046 Published 2022-05-01 No fix listed CWE-79