Beveiligingsadvies

CVE-2022-25349

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2022-05-01 15:30:22

Laatst bijgewerkt 2024-09-17 00:55:44

Toegewezen door snyk

CVSS-score 5.4

Status PUBLISHED

Beschrijving

All versions of package materialize-css are vulnerable to Cross-site Scripting (XSS) due to improper escape of user input (such as <not-a-tag />) that is being parsed as HTML/JavaScript, and inserted into the Document Object Model (DOM). This vulnerability can be exploited when the user-input is provided to the autocomplete component.

← Alle CVE's bekijken Bekijk op cve.org ↗