{"action":"Upgrade fullpage.js to 4.0.5 or later.","affected":[{"fixed":"4.0.5","introduced":"0"}],"component":"fullpage.js","cve_ids":["CVE-2022-1330"],"ecosystem":"npm","epss":0.00825,"exploited":false,"fixed_versions":["4.0.5"],"ghsa_id":"GHSA-h3cq-j957-vhxg","id":"tcs_01M5KFSZ9X9E2WFA42PJKGJ862","modified_at":"2023-11-08T04:07:47.204575Z","published_at":"2022-04-13T00:00:16Z","references":["https://osv.dev/vulnerability/GHSA-h3cq-j957-vhxg","https://nvd.nist.gov/vuln/detail/CVE-2022-1330","https://github.com/alvarotrigo/fullPage.js/pull/4360","https://github.com/alvarotrigo/fullpage.js/commit/e7a5db42711700c8a584e61b5e532a64039fe92b","https://github.com/alvarotrigo/fullpage.js","https://huntr.dev/bounties/08d2a6d0-772f-4b05-834e-86343f263c35"],"severity":{"label":"medium","score":5.4},"sources":[{"source":"osv","source_id":"GHSA-h3cq-j957-vhxg","url":"https://osv.dev/vulnerability/GHSA-h3cq-j957-vhxg"}],"summary":"Cross-site Scripting in fullpage.js"}