CVE-2022-1330

stored xss due to unsantized anchor url in GitHub repository alvarotrigo/fullpage.js prior to 4.0.4. stored xss...

Cross-site Scripting (XSS)

fullpage.js is vulnerable to cross-site scripting. Lack of sanitization of anchor URL before putting it in anchor href in alvarotrigo/fullpage.js allows an attacker to inject malicious javascript...

CVE-2022-1330

stored xss due to unsantized anchor url in GitHub repository alvarotrigo/fullpage.js prior to 4.0.4. stored xss...

CVE-2022-1330: Improper Neutralization of Input During Web Page Generation

stored xss due to unsantized anchor url in GitHub repository alvarotrigo/fullpage.js prior to 4.0.4. stored xss...

PT-2022-13803

Name of the Vulnerable Software and Affected Versions fullpage.js versions prior to 4.0.4 Description The issue is related to a stored XSS due to an unsanitized anchor URL. When creating an anchor tag using fullpage.js and adding an href attribute, the URL is not properly sanitized. This allows f...