Lucene search
Veracode Vulnerability DatabaseVERACODE:35381HistoryMay 05, 2022 - 3:45 a.m.
Cross-site Scripting (XSS)
2022-05-0503:45:14
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.001 Low
EPSS
Percentile
34.7%
materialize-css is vulnerable to cross-site scripting. The _highlight function of autocomplete.js does not properly escape the user input such as <not-a-tag />, allowing an attacker to inject and execute malicious javascript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| materialize-css | le | 1.0.0 | |
| materialize-css | le | 1.0.0 | |
| materialize-css | le | 1.0.0 | |
| materialize-css | le | 1.0.0 |
Related
osv
osv
nvd
nvd
CVE-2022-25349
2022-05-01 16:15:08
cve
cve
CVE-2022-25349
2022-05-01 16:15:08
prion
prion
Cross site scripting
2022-05-01 16:15:00
debiancve
debiancve
CVE-2022-25349
2022-05-01 16:15:08
cvelist
cvelist
CVE-2022-25349 Cross-site Scripting (XSS)
2022-05-01 00:00:00
github
github