328 matches found
Cross-site Scripting (XSS)
materialize is vulnerable to cross-site scripting XSS attacks. A remote attacker is able to inject arbitrary Javascript into a victim’s browser via the Toast feature...
Cross-site Scripting (XSS)
materialize is vulnerable to cross-site scripting XSS attacks. A remote attacker is able to inject arbitrary Javascript into a victim’s browser via the Autocomplete feature...
Cross-site Scripting (XSS)
materialize is vulnerable to cross-site scripting XSS attacks. A remote attacker is able to inject arbitrary Javascript into a victim's browser via the Tooltip feature...
Authorization
In Materialize through 1.0.0, XSS is possible via the Toast feature...
CVE-2019-11002
In Materialize through 1.0.0, XSS is possible via the Tooltip feature...
CVE-2019-11002
In Materialize through 1.0.0, XSS is possible via the Tooltip feature...
CVE-2019-11003
In Materialize through 1.0.0, XSS is possible via the Autocomplete feature...
Design/Logic Flaw
In Materialize through 1.0.0, XSS is possible via the Tooltip feature...
Security feature bypass
In Materialize through 1.0.0, XSS is possible via the Autocomplete feature...
CVE-2019-11004
In Materialize through 1.0.0, XSS is possible via the Toast feature...
CVE-2019-11003
In Materialize through 1.0.0, XSS is possible via the Autocomplete feature...
CVE-2019-11004
In Materialize through 1.0.0, XSS is possible via the Toast feature...
CVE-2019-11004
In Materialize through 1.0.0, XSS is possible via the Toast feature...
CVE-2019-11004
In Materialize through 1.0.0, XSS is possible via the Toast feature...
CVE-2019-11004
Materialize (up to 1.0.0) is vulnerable to cross-site scripting via the Toast feature. The issue is XSS in the Toast UI component, allowing injection of arbitrary JavaScript into a victim’s browser. Connected sources confirm this across multiple feeds (including Red Hat/EUVD/GHSA references). The...
CVE-2019-11003
In Materialize through 1.0.0, XSS is possible via the Autocomplete feature...
CVE-2019-11003
Materialize up to version 1.0.0 is susceptible to Cross-Site Scripting via the Autocomplete feature. The root cause is insufficient sanitization of user input in the Autocomplete component, enabling arbitrary JavaScript execution when rendered. Affected: Materialize (frontend framework) using the...
CVE-2019-11003
In Materialize through 1.0.0, XSS is possible via the Autocomplete feature...
CVE-2019-11002
In Materialize through 1.0.0, XSS is possible via the Tooltip feature...
CVE-2019-11002
Materialize up to 1.0.0 is vulnerable to Cross-Site Scripting via the Tooltip component. The vulnerability arises from insufficient sanitization of user input in the tooltip, allowing attacker-controlled content to be rendered as JavaScript. Multiple sources (including Red Hat/Veracode and OSV/PR...