Lucene search
+L

6 matches found

OSV
OSV
added 2022/05/03 12:0 a.m.9 views

GHSA-7JVX-F994-RFW2 materialize-css vulnerable to cross-site Scripting (XSS) due to improper escape of user input

All versions of package materialize-css are vulnerable to Cross-site Scripting XSS due to improper escape of user input such as not-a-tag / that is being parsed as HTML/JavaScript, and inserted into the Document Object Model DOM. This vulnerability can be exploited when the user-input is provided...

5.4CVSS6.1AI score0.0103EPSS
SaveExploits1References5
Rows per page
Query Builder