Fullpage Project

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical1CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Fullpage Project records in CISA KEV

No Fullpage Project vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

2 records

TI-2022-01179 CVE-2022-1295 · GHSA-vpgw-ffh3-648h

MEDIUM 45

Prototype Pollution in GitHub repository alvarotrigo/fullpage.js prior to 4.0.2.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01291 Published 2022-04-11 Fixed in 4.0.2 CWE-1321

TI-2022-01212 CVE-2022-1330 · GHSA-h3cq-j957-vhxg

LOW 26

stored xss due to unsantized anchor url in GitHub repository alvarotrigo/fullpage.js prior to 4.0.4.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00825 Published 2022-04-12 Fixed in 4.0.4, 4.0.5 CWE-79