Vulnerabilities

TI-2022-09038 CVE-2022-25349 · GHSA-7jvx-f994-rfw2

Cross-site scripting (XSS) in materialize-css

LOW 27

All versions of package materialize-css are vulnerable to Cross-site Scripting (XSS) due to improper escape of user input (such as <not-a-tag />) that is being parsed as HTML/JavaScript, and inserted into the Docum…

CVSS 3.1MEDIUM 5.4 Network No auth User interaction EPSS 0.01046 Published 2022-05-01 No fix listed CWE-79

TI-2019-08222 CVE-2019-11004 · GHSA-rg3q-jxmp-pvjj

In Materialize through 1.0.0, XSS is possible via the Toast feature.

LOW 29

In Materialize through 1.0.0, XSS is possible via the Toast feature.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00792 Published 2019-04-08 Fixed in 1.1.0-alpha CWE-79

TI-2019-08221 CVE-2019-11003 · GHSA-7752-f4gf-94gc

In Materialize through 1.0.0, XSS is possible via the Autocomplete feature.

LOW 29

In Materialize through 1.0.0, XSS is possible via the Autocomplete feature.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00788 Published 2019-04-08 Fixed in 1.1.0-alpha CWE-79

TI-2019-08220 CVE-2019-11002 · GHSA-98f7-p5rc-jx67

In Materialize through 1.0.0, XSS is possible via the Tooltip feature.

LOW 29

In Materialize through 1.0.0, XSS is possible via the Tooltip feature.

CVSS 3.0MEDIUM 6.1 Network No auth User interaction EPSS 0.00795 Published 2019-04-08 Fixed in 1.1.0-alpha CWE-79

Vulnerabilities

Filters

Cross-site scripting (XSS) in materialize-css

In Materialize through 1.0.0, XSS is possible via the Toast feature.

In Materialize through 1.0.0, XSS is possible via the Autocomplete feature.

In Materialize through 1.0.0, XSS is possible via the Tooltip feature.