Materialize · Materialize · CVE-2019-11002
**Name of the Vulnerable Software and Affected Versions**
Materialize versions prior to 1.0.1
materialize-css (all versions)
**Description**
The issue allows for Cross-Site Scripting (XSS) due to insufficient sanitization of user input in the `tooltip` component. This enables an attacker to execute arbitrary JavaScript code if the malicious input is rendered by a user.
**Recommendations**
For Materialize versions prior to 1.0.1, consider using an alternative module until a fix is made available.
For materialize-css, consider using an alternative module until a fix is made available.