Description
In Materialize through 1.0.0, XSS is possible via the Tooltip feature.
Remediation
References
https://github.com/Dogfalo/materialize/issues/6286
Related Vulnerabilities
CVE-2020-28445 Vulnerability in npm package npm-help
CVE-2022-31198 Vulnerability in maven package org.webjars.npm:openzeppelin__contracts
CVE-2019-0230 Vulnerability in maven package org.apache.struts:struts2-core
CVE-2021-23558 Vulnerability in npm package bmoor
CVE-2022-31170 Vulnerability in npm package @openzeppelin/contracts