Lucene search
@huntrdevCVELIST:CVE-2022-1330HistoryApr 12, 2022 - 8:40 p.m.
CVE-2022-1330 stored xss due to unsantized anchor url in alvarotrigo/fullpage.js
2022-04-1220:40:10
CWE-79
@huntrdev
www.cve.org
9.4 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
0.001 Low
EPSS
Percentile
21.4%
stored xss due to unsantized anchor url in GitHub repository alvarotrigo/fullpage.js prior to 4.0.4. stored xss .
CNA Affected
[
{
"product": "alvarotrigo/fullpage.js",
"vendor": "alvarotrigo",
"versions": [
{
"lessThan": "4.0.4",
"status": "affected",
"version": "unspecified",
"versionType": "custom"
}
]
}
]Related
huntr
huntr
stored xss due to unsantized anchor url
2022-04-11 20:00:56
prion
prion
Cross site scripting
2022-04-12 21:15:00
osv
osv
CVE-2022-1330
2022-04-12 21:15:07
Cross-site Scripting in fullpage.js
2022-04-13 00:00:16
github
github
Cross-site Scripting in fullpage.js
2022-04-13 00:00:16
nvd
nvd
CVE-2022-1330
2022-04-12 21:15:07
cve
cve
CVE-2022-1330
2022-04-12 21:15:07
veracode
veracode
Cross-site Scripting (XSS)
2022-04-13 03:41:13
9.4 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
LOW
Availability Impact
HIGH
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:H
0.001 Low
EPSS
Percentile
21.4%
Related for CVELIST:CVE-2022-1330