Read the docs

TotalSuite

Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

TotalSuite records in CISA KEV

No TotalSuite vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

7 records

TI-2024-12846 CVE-2024-13822 · GHSA-gxcp-qqh4-j6r9

Total Contest Lite <= 2.8.1 - Reflected XSS

Priority MEDIUM 60

The Photo Contest | Competition | Video Contest WordPress plugin through 2.8.1 does not sanitise and escape a parameter before outputting it back in the page, leading to a Reflected Cross-Site Scripting which could be us…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00341 Published 2025-02-24 No fix listed CWE-79
Priority LOW 31

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in TotalSuite TotalContest Lite totalcontest-lite allows Reflected XSS.This issue affects TotalContest Lite: from n/a thr…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00293 Published 2025-04-17 No fix listed CWE-79
Priority LOW 28

Missing Authorization vulnerability in TotalSuite Total Poll Lite totalpoll-lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Total Poll Lite: from n/a through <= 4.12.0.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00191 Published 2026-04-08 No fix listed CWE-862
Priority LOW 28

Missing Authorization vulnerability in TotalSuite Total Poll Lite allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Total Poll Lite: from n/a through 4.8.6.

CVSS 3.1MEDIUM 6.3 Network Low privileges No interaction EPSS 0.00396 Published 2024-12-09 No fix listed CWE-862
Open these records in search →