Description
In Materialize through 1.0.0, XSS is possible via the Autocomplete feature.
Remediation
References
https://github.com/Dogfalo/materialize/issues/6286
Related Vulnerabilities
CVE-2018-14042 Vulnerability in maven package org.webjars.bower:bootstrap-sass
CVE-2019-18799 Vulnerability in maven package org.webjars.npm:node-sass
CVE-2015-0250 Vulnerability in maven package org.apache.xmlgraphics:batik-transcoder
CVE-2023-26136 Vulnerability in npm package tough-cookie
CVE-2022-0272 Vulnerability in maven package io.gitlab.arturbosch.detekt:detekt-core