CVE-2022-1295

CRITICAL

fullpage < 4.0.2 - Prototype Pollution

Title source: llm

Prototype Pollution in GitHub repository alvarotrigo/fullpage.js prior to 4.0.2.

Core 2

Core References

Exploit, Third Party Advisory x_refsource_confirm

Patch, Third Party Advisory x_refsource_misc

CVSS v3 9.8

EPSS 0.0123

EPSS Percentile 65.1%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-1321

Status published

Products (2)

fullpage_project/fullpage < 4.0.2

npm/fullpage.js 0 - 4.0.2npm

Published Apr 11, 2022

Tracked Since Feb 18, 2026