CVE-2019-11004

In Materialize through 1.0.0, XSS is possible via the Toast feature...

CVE-2019-11004

In Materialize through 1.0.0, XSS is possible via the Toast feature...

CVE-2019-11004

Materialize (up to 1.0.0) is vulnerable to cross-site scripting via the Toast feature. The issue is XSS in the Toast UI component, allowing injection of arbitrary JavaScript into a victim’s browser. Connected sources confirm this across multiple feeds (including Red Hat/EUVD/GHSA references). The...