6 matches found
CVE-2019-11003
In Materialize through 1.0.0, XSS is possible via the Autocomplete feature...
EUVD-2025-177939
Malicious code in materialize-framework-electron-builder-enceladus npm...
Cross-site Scripting (XSS)
Overview materialize-css is a CSS Framework based on Material Design. Affected versions of this package are vulnerable to Cross-site Scripting XSS due to improper escape of user input such as not-a-tag / that is being parsed as HTML/JavaScript, and inserted into the Document Object Model DOM. Thi...
Materialize cross-site scripting vulnerability (CNVD-2019-12908)
Materialize is a modern responsive front-end framework based on Material Design. A cross-site scripting vulnerability exists in Materialize 1.0.0 and prior versions, which stems from a lack of proper validation of client-side data in the WEB application. An attacker can exploit this vulnerability...
Materialize Cross-Site Scripting Vulnerability
Materialize is a modern responsive front-end framework based on Material Design. A cross-site scripting vulnerability exists in Materialize 1.0.0 and prior versions, which stems from a lack of proper validation of client-side data in the WEB application. An attacker can exploit this vulnerability...
