Fullpage Project Fullpage — known CVE vulnerabilities

Every CVE whose affected-product data names Fullpage Project Fullpage, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2022-1295 — CVSS 9.8 (critical): Prototype Pollution in GitHub repository alvarotrigo/fullpage.js prior to 4.0.2.
• CVE-2022-1330 — CVSS 5.4 (medium): stored xss due to unsantized anchor url in GitHub repository alvarotrigo/fullpage.js prior to 4.0.4. stored xss .