Advisories for Npm/Fullpage package

2022

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

stored xss due to unsantized anchor url in GitHub repository alvarotrigo/fullpage.js prior to 4.0.4. stored xss .

Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution')

Prototype Pollution in GitHub repository alvarotrigo/fullpage.js prior to 4.0.2.