Medium · 6.1 CVE-2019-11002 EUVD-2019-0413GHSA-98f7-p5rc-jx67

Materialize-css vulnerable to Cross-site Scripting in tooltip component

Published Apr 8, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

In Materialize through 1.0.0, XSS is possible via the Tooltip feature.

Ecosystem	Package	Affected	Fixed	Record
npm	@materializecss/materialize	< 1.1.0-alpha	1.1.0-alpha	GHSA-98f7-p5rc-jx67
npm	materialize-css	<= 1.0.0	—	GHSA-98f7-p5rc-jx67