Lucene search
Veracode Vulnerability DatabaseVERACODE:35068HistoryApr 13, 2022 - 3:41 a.m.
Cross-site Scripting (XSS)
2022-04-1303:41:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
12
0.001 Low
EPSS
Percentile
21.4%
fullpage.js is vulnerable to cross-site scripting. Lack of sanitization of anchor URL before putting it in anchor href in alvarotrigo/fullpage.js allows an attacker to inject malicious javascript.
| CPE | Name | Operator | Version |
|---|---|---|---|
| fullpage.js | le | 3.1.2 | |
| fullpage.js | le | 4.0.5 | |
| fullpage.js | le | 3.1.2 | |
| fullpage.js | le | 4.0.4 |
Related
huntr
huntr
stored xss due to unsantized anchor url
2022-04-11 20:00:56
prion
prion
Cross site scripting
2022-04-12 21:15:00
osv
osv
CVE-2022-1330
2022-04-12 21:15:07
Cross-site Scripting in fullpage.js
2022-04-13 00:00:16
github
github
Cross-site Scripting in fullpage.js
2022-04-13 00:00:16
cve
cve
CVE-2022-1330
2022-04-12 21:15:07
cvelist
cvelist
nvd
nvd
CVE-2022-1330
2022-04-12 21:15:07