EPSS
Percentile
37.3%
In Materialize through 1.0.0, XSS is possible via the Toast feature.
github.com/Dogfalo/materialize/issues/6286