Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Material for MkDocs is a powerful documentation framework built on top of MkDocs. From 7.2.0 until 9.7.7, the mountSearchSuggest function in src/templates/assets/javascripts/components/search/suggest/index.ts contains a DOM-based cross-site scripting vulnerability in the optional search.suggest feature that allows a crafted q URL parameter to execute JavaScript in a documentation site's origin after user interaction. This issue is fixed in version 9.7.7.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
CVE-2026-73295 DOM-Based XSS in Material for MkDocs Search Suggest Feature https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-73295
Post summary
The entry reports a DOM‑based XSS issue in Material for MkDocs, but offers only a basic description without any PoC, exploit, patch or active exploitation details.