Skip to content
OpenAdvisories

Package · npm

materialize-css

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 5.4
    CVE-2022-25349

    Cross-site Scripting (XSS)

    All versions of package materialize-css are vulnerable to Cross-site Scripting (XSS) due to improper escape of user input (such as <not-a-tag />) that is being parsed as HTML/JavaScript, and inserted into the Document Object Model (DOM). This vulnerabil…

    materialize-css npm
  • Medium 6.1
    CVE-2019-11004

    Materialize-css vulnerable to Improper Neutralization of Input During Web Page Generation

    In Materialize through 1.0.0, XSS is possible via the Toast feature.

    materialize-css @materializecss/materialize npm
  • Medium 6.1
    CVE-2019-11003

    Materialize-css vulnerable to Cross-site Scripting in autocomplete component

    In Materialize through 1.0.0, XSS is possible via the Autocomplete feature.

    materialize-css @materializecss/materialize npm
  • Medium 6.1
    CVE-2019-11002

    Materialize-css vulnerable to Cross-site Scripting in tooltip component

    In Materialize through 1.0.0, XSS is possible via the Tooltip feature.

    materialize-css @materializecss/materialize npm