Totaljs vulnerabilities

Products

• Total.js 12
• Total.js Cms 7
• Messenger 3
• Openplatform 2

Newest

• statamic cms, totaljs total.js +1 more Total.js CMS Files Menu cross site scripting CVE-2025-11019 4.8 MediumSeptember 26, 2025
• statamic cms, totaljs total.js +1 more Total.js CMS Layout admin layouts_save cross site scripting CVE-2025-10940 4.8 MediumSeptember 25, 2025
• totaljs total.js, total.js cms +1 more An issue in Total.js CMS v.1.0 allows a remote attacker to execute arbitrary code via the func.js... CVE-2024-48655 8.8 HighOctober 25, 2024
• totaljs messenger A stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows... CVE-2023-30097 5.4 MediumMay 4, 2023
• totaljs messenger A stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows... CVE-2023-30096 5.4 MediumMay 4, 2023
• totaljs messenger A stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows... CVE-2023-30095 5.4 MediumMay 4, 2023
• totaljs flow Cross-site scripting in TotalJS CVE-2023-30094 Fix available 5.4 MediumMay 4, 2023
• totaljs openplatform A stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows... CVE-2023-27070 5.4 MediumMarch 14, 2023
• totaljs openplatform A stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows... CVE-2023-27069 5.4 MediumMarch 14, 2023
• totaljs total.js In Total.js 4 before 0e5ace7, /api/common/ping can achieve remote command execution via shell... CVE-2022-44019 8.8 HighOctober 29, 2022
• totaljs total.js A cross-site scripting (XSS) vulnerability in TotalJS commit 8c2c8909 allows attackers to execute... CVE-2022-41392 5.4 MediumOctober 7, 2022
• totaljs total.js A stored cross-site scripting (XSS) vulnerability in the upload function of totaljs CMS 3.4.5... CVE-2022-30013 5.4 MediumMay 16, 2022
• totaljs content management system A cross-site scripting (XSS) vulnerability in Totaljs commit 95f54a5 allows attackers to execute... CVE-2022-26565 4.8 MediumApril 1, 2022
• flarum framework, totaljs total.js +1 more Code injection in total.js CVE-2021-32831 Fix available 7.5 HighAugust 30, 2021
• totaljs total.js Arbitrary Code Execution CVE-2021-23389 Fix available 9.8 CriticalJuly 12, 2021
• totaljs total4 Arbitrary Code Execution CVE-2021-23390 Fix available 9.8 CriticalJuly 12, 2021
• totaljs total.js Remote Code Execution (RCE) CVE-2021-23344 Fix available 9.8 CriticalMarch 4, 2021
• totaljs total.js Command Injection CVE-2020-28494 Fix available 8.6 HighFebruary 2, 2021
• totaljs total.js Prototype Pollution CVE-2020-28495 Fix available 7.3 HighFebruary 2, 2021
• totaljs total.js cms controllers/admin.js in Total.js CMS 13 allows remote attackers to execute arbitrary code via a... CVE-2020-9381 7.5 HighFebruary 24, 2020
• totaljs total.js cms Total.js CMS Path Traversal CVE-2019-15952 8.8 HighSeptember 5, 2019
• totaljs total.js cms Total.js CMS Unauthorized Access CVE-2019-15953 8.8 HighSeptember 5, 2019
• totaljs total.js cms Total.js CMS RCE Vulnerability CVE-2019-15954 Public exploit EPSS 78.7% 9.9 CriticalSeptember 5, 2019
• totaljs total.js cms An issue was discovered in Total.js CMS 12.0.0. A low privilege user can perform a simple... CVE-2019-15955 6.5 MediumSeptember 5, 2019
• totaljs total.js cms Moderate severity vulnerability that affects total.js CVE-2019-10260 Fix available 6.1 MediumMarch 28, 2019
• totaljs total.js Path Traversal in total.js CVE-2019-8903 Fix available EPSS 72.1% 7.5 HighFebruary 18, 2019