Medium · 6.1 CVE-2019-11003 EUVD-2019-0406GHSA-7752-f4gf-94gc

Materialize-css vulnerable to Cross-site Scripting in autocomplete component

Published Apr 8, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

In Materialize through 1.0.0, XSS is possible via the Autocomplete feature.

Ecosystem	Package	Affected	Fixed	Record
npm	@materializecss/materialize	< 1.1.0-alpha	1.1.0-alpha	GHSA-7752-f4gf-94gc
npm	materialize-css	<= 1.0.0	—	GHSA-7752-f4gf-94gc