fullpage.js (npm) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the npm package fullpage.js, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (2)

• CVE-2022-1295 — CVSS 9.8 (critical): Prototype Pollution in GitHub repository alvarotrigo/fullpage.js prior to 4.0.2.
• CVE-2022-1330 — CVSS 5.4 (medium): stored xss due to unsantized anchor url in GitHub repository alvarotrigo/fullpage.js prior to 4.0.4. stored xss .