Read the docs

Total.js

Records27All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical4CVSS 9.0–10.0
CVSS high9CVSS 7.0–8.9

Exploited now

Total.js records in CISA KEV

No Total.js vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Total.js 12 records HIGH Total.js Cms 6 records HIGH Messenger 3 records MEDIUM Openplatform 2 records MEDIUM Content Management System 1 record LOW Flow 1 record MEDIUM Total4 1 record MEDIUM

Records

1 record in Flow · all components

TI-2023-14133 CVE-2023-30094 · GHSA-jj45-24rw-v6jw

A stored cross-site scripting (XSS) vulnerability in TotalJS Flow v10 allows attackers to…

Priority MEDIUM 58

A stored cross-site scripting (XSS) vulnerability in TotalJS Flow v10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field in the settings module.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00667 Published 2023-05-04 Fixed in 0.0.81 CWE-79
Open these records in search →