268 matches found
Cross-Site Scripting
Overview All versions of materialize-css are vulnerable to Cross-Site Scripting. The tooltip component does not sufficiently sanitize user input, allowing an attacker to execute arbitrary JavaScript code if the malicious input is rendered by a user. Recommendation No fix is currently available...
Materialize cross-site scripting vulnerability (CNVD-2019-12908)
Materialize is a modern responsive front-end framework based on Material Design. A cross-site scripting vulnerability exists in Materialize 1.0.0 and prior versions, which stems from a lack of proper validation of client-side data in the WEB application. An attacker can exploit this vulnerability...
Materialize Cross-Site Scripting Vulnerability
Materialize is a modern responsive front-end framework based on Material Design. A cross-site scripting vulnerability exists in Materialize 1.0.0 and prior versions, which stems from a lack of proper validation of client-side data in the WEB application. An attacker can exploit this vulnerability...
GHSA-98F7-P5RC-JX67 Materialize-css vulnerable to Cross-site Scripting in tooltip component
All versions of materialize-css are vulnerable to Cross-Site Scripting. The tooltip component does not sufficiently sanitize user input, allowing an attacker to execute arbitrary JavaScript code if the malicious input is rendered by a user. Recommendation No fix is currently available. Consider...
Materialize-css vulnerable to Cross-site Scripting in tooltip component
All versions of materialize-css are vulnerable to Cross-Site Scripting. The tooltip component does not sufficiently sanitize user input, allowing an attacker to execute arbitrary JavaScript code if the malicious input is rendered by a user. Recommendation No fix is currently available. Consider...
Materialize-css vulnerable to Cross-site Scripting in autocomplete component
All versions of materialize-css are vulnerable to Cross-Site Scripting. The autocomplete component does not sufficiently sanitize user input, allowing an attacker to execute arbitrary JavaScript code if the malicious input is rendered by a user. Recommendation No fix is currently available...
GHSA-7752-F4GF-94GC Materialize-css vulnerable to Cross-site Scripting in autocomplete component
All versions of materialize-css are vulnerable to Cross-Site Scripting. The autocomplete component does not sufficiently sanitize user input, allowing an attacker to execute arbitrary JavaScript code if the malicious input is rendered by a user. Recommendation No fix is currently available...
GHSA-RG3Q-JXMP-PVJJ Materialize-css vulnerable to Improper Neutralization of Input During Web Page Generation
In Materialize through 1.0.0, XSS is possible via the Toast feature...
Materialize-css vulnerable to Improper Neutralization of Input During Web Page Generation
In Materialize through 1.0.0, XSS is possible via the Toast feature...
Cross-site Scripting (XSS)
materialize is vulnerable to cross-site scripting XSS attacks. A remote attacker is able to inject arbitrary Javascript into a victim’s browser via the Toast feature...
Cross-site Scripting (XSS)
materialize is vulnerable to cross-site scripting XSS attacks. A remote attacker is able to inject arbitrary Javascript into a victim’s browser via the Autocomplete feature...
Cross-site Scripting (XSS)
materialize is vulnerable to cross-site scripting XSS attacks. A remote attacker is able to inject arbitrary Javascript into a victim's browser via the Tooltip feature...
CVE-2019-11004
In Materialize through 1.0.0, XSS is possible via the Toast feature...
CVE-2019-11003
In Materialize through 1.0.0, XSS is possible via the Autocomplete feature...
Authorization
In Materialize through 1.0.0, XSS is possible via the Toast feature...
CVE-2019-11004
In Materialize through 1.0.0, XSS is possible via the Toast feature...
CVE-2019-11002
In Materialize through 1.0.0, XSS is possible via the Tooltip feature...
Security feature bypass
In Materialize through 1.0.0, XSS is possible via the Autocomplete feature...