GHSA-98f7-p5rc-jx67MediumCVSS 6.1

Materialize-css vulnerable to Cross-site Scripting in tooltip component

Published
April 9, 2019
Last Modified
August 28, 2023

🔗 CVE IDs covered (1)

CVE-2019-11002 →

📋 Description

All versions of materialize-css are vulnerable to Cross-Site Scripting. The tooltip component does not sufficiently sanitize user input, allowing an attacker to execute arbitrary JavaScript code if the malicious input is rendered by a user.

Recommendation

No fix is currently available. Consider using an alternative module until a fix is made available.

🎯 Affected products2

  • npm/materialize-css:<= 1.0.0
  • npm/@materializecss/materialize:< 1.1.0-alpha

🔗 References (6)