Lucene search
GoogleOSV:GHSA-H3CQ-J957-VHXGHistoryApr 13, 2022 - 12:00 a.m.
Cross-site Scripting in fullpage.js
2022-04-1300:00:16
Google
osv.dev
8
0.001 Low
EPSS
Percentile
21.4%
using fullpage.js you can create a anchor tag . But when put href in anchor then it does not sanitize the url which allow for a break in the context of anchor element and can add our new element.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fullpage.js | lt | 4.0.5 |
Related
huntr
huntr
stored xss due to unsantized anchor url
2022-04-11 20:00:56
prion
prion
Cross site scripting
2022-04-12 21:15:00
osv
osv
CVE-2022-1330
2022-04-12 21:15:07
github
github
Cross-site Scripting in fullpage.js
2022-04-13 00:00:16
cve
cve
CVE-2022-1330
2022-04-12 21:15:07
cvelist
cvelist
nvd
nvd
CVE-2022-1330
2022-04-12 21:15:07
veracode
veracode
Cross-site Scripting (XSS)
2022-04-13 03:41:13