| Package | Affected versions | Patched versions |
|---|---|---|
| materialize | ≤ 1.0.0 | |
| @materializecss/materialize | < 1.1.0-alpha | 1.1.0-alpha |
| materialize-css | ≤ 1.0.0 |
All versions of materialize-css are vulnerable to Cross-Site Scripting. The tooltip component does not sufficiently sanitize user input, allowing an attacker to execute arbitrary JavaScript code if the malicious input is rendered by a user.
No fix is currently available. Consider using an alternative module until a fix is made available.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free