CVE-2026-73295 | squidfunk MkDocs Material up to 9.7.6 Search Suggest index.ts mountSearchSuggest q cross site scripting

A vulnerability was found in squidfunk MkDocs Material up to 9.7.6 and classified as problematic. Affected by this vulnerability is the function mountSearchSuggest of the file src/templates/assets/javascripts/components/search/suggest/index.ts of the component Search Suggest. Executing a manipulation of the argument q can lead to cross site scripting.

This vulnerability is tracked as CVE-2026-73295. The attack can be launched remotely. No exploit exists.

It is suggested to upgrade the affected component.