Description
In Materialize through 1.0.0, XSS is possible via the Tooltip feature.
Remediation
References
https://github.com/Dogfalo/materialize/issues/6286
Related Vulnerabilities
CVE-2022-25883 Vulnerability in maven package org.webjars.npm:semver
CVE-2022-21680 Vulnerability in npm package marked
CVE-2022-2063 Vulnerability in npm package nocodb
CVE-2020-11991 Vulnerability in maven package org.apache.cocoon:cocoon-core
CVE-2021-43306 Vulnerability in maven package org.webjars.bower:jquery-validation