Totalcms

Records1All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Totalcms records in CISA KEV

No Totalcms vulnerabilities are listed in CISA KEV.

Products in the NVD configurations · select one to filter the records

1 record in Total Cms · all components

TI-2023-18159 CVE-2023-36212 · GHSA-89wh-c5hj-jpf2

HIGH 73

File Upload vulnerability in Total CMS v.1.7.4 allows a remote attacker to execute arbitrary code via a crafted PHP file to the edit page function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.25786 Published 2023-08-03 No fix listed CWE-434