Description
In Materialize through 1.0.0, XSS is possible via the Autocomplete feature.
Remediation
References
https://github.com/Dogfalo/materialize/issues/6286
Related Vulnerabilities
CVE-2021-32809 Vulnerability in npm package ckeditor4
CVE-2020-28479 Vulnerability in npm package jointjs
CVE-2022-36083 Vulnerability in maven package org.webjars.npm:jose
CVE-2021-26707 Vulnerability in maven package org.webjars.npm:merge-deep
CVE-2023-40339 Vulnerability in maven package org.jenkins-ci.plugins:config-file-provider