Description
In Materialize through 1.0.0, XSS is possible via the Autocomplete feature.
Remediation
References
https://github.com/Dogfalo/materialize/issues/6286
Related Vulnerabilities
CVE-2022-45146 Vulnerability in maven package org.bouncycastle:bc-fips
CVE-2022-25646 Vulnerability in npm package x-data-spreadsheet
CVE-2020-28502 Vulnerability in maven package org.webjars.npm:xmlhttprequest
CVE-2020-7784 Vulnerability in npm package ts-process-promises
CVE-2022-30973 Vulnerability in maven package org.apache.tika:tika