3 matches found
CVE-2022-1330
stored xss due to unsantized anchor url in GitHub repository alvarotrigo/fullpage.js prior to 4.0.4. stored xss...
9.4CVSS6.4AI score0.00825EPSS
SaveExploits1References1
Cross-site Scripting (XSS)
fullpage.js is vulnerable to cross-site scripting. Lack of sanitization of anchor URL before putting it in anchor href in alvarotrigo/fullpage.js allows an attacker to inject malicious javascript...
5.4CVSS1.8AI score0.00825EPSS
SaveExploits1References3Affected Software1
CVE-2022-1330: Improper Neutralization of Input During Web Page Generation
stored xss due to unsantized anchor url in GitHub repository alvarotrigo/fullpage.js prior to 4.0.4. stored xss...
9.4CVSS7.3AI score0.00825EPSS
SaveExploits1References2
20