Description
In Materialize through 1.0.0, XSS is possible via the Tooltip feature.
Remediation
References
https://github.com/Dogfalo/materialize/issues/6286
Related Vulnerabilities
CVE-2020-26302 Vulnerability in maven package org.webjars.npm:is_js
CVE-2022-33891 Vulnerability in maven package org.apache.spark:spark-core_2.13
CVE-2020-5397 Vulnerability in maven package org.springframework:spring-webflux
CVE-2023-27087 Vulnerability in maven package com.xuxueli:xxl-job
CVE-2021-21363 Vulnerability in maven package io.swagger:swagger-generator