2 matches found
CVE-2019-11003
In Materialize through 1.0.0, XSS is possible via the Autocomplete feature...
6AI score0.00788EPSS
SaveExploits1References1
CVE-2019-11003
Materialize up to version 1.0.0 is susceptible to Cross-Site Scripting via the Autocomplete feature. The root cause is insufficient sanitization of user input in the Autocomplete component, enabling arbitrary JavaScript execution when rendered. Affected: Materialize (frontend framework) using the...
6.1CVSS5.9AI score0.00788EPSS
SaveExploits1References1Affected Software1
20