Medium · 6.1 CVE-2019-11004 EUVD-2019-0435GHSA-rg3q-jxmp-pvjj

Materialize-css vulnerable to Improper Neutralization of Input During Web Page Generation

Published Apr 8, 2019 · Updated Aug 4, 2024 · Assigned by mitre

Description

In Materialize through 1.0.0, XSS is possible via the Toast feature.

Ecosystem	Package	Affected	Fixed	Record
npm	@materializecss/materialize	< 1.1.0-alpha	1.1.0-alpha	GHSA-rg3q-jxmp-pvjj
npm	materialize-css	<= 1.0.0	—	GHSA-rg3q-jxmp-pvjj