Skip to content
OpenAdvisories
Critical · 9.4 CVE-2022-1330 EUVD-2022-1753GHSA-h3cq-j957-vhxg

stored xss due to unsantized anchor url in alvarotrigo/fullpage.js

Published Apr 12, 2022 · Updated Aug 3, 2024 · Assigned by @huntrdev

Vendor: alvarotrigo Product: alvarotrigo/fullpage.js Package: fullpage.js Ecosystem: npm

Description

stored xss due to unsantized anchor url in GitHub repository alvarotrigo/fullpage.js prior to 4.0.4. stored xss .

Affected products

VendorProductAffectedFixed
alvarotrigo alvarotrigo/fullpage.js unspecified – < 4.0.4 4.0.4

Affected packages

EcosystemPackageAffectedFixedRecord
npm fullpage.js < 4.0.5 4.0.5 GHSA-h3cq-j957-vhxg

References