GitHub Advisoryadvisory · npm
GHSA-72p5-2r6g-fm6v Moderate severity vulnerability that affects total.js
MEDIUM
Official page ↗
- Aliases
- CVE-2019-10260
- Ecosystem
- npm
- Packages
- total.js
- Severity
- Moderate
- CVSS vector
- CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
- Weaknesses
- CWE-79
- Reviewed
- 2020-06-16
Affected packages
• npm total.js: < 3.3.0-13 → fixed in 3.3.0-13
Description
Total.js CMS 12.0.0 has XSS related to themes/admin/views/index.html (item.message) and themes/admin/public/ui.js (column.format).
Related
Alias · CVE (1)
- CVE-2019-10260 Total.js CMS 12.0.0 has XSS related to themes/admin/views/index.html (item.message) and themes/admin/public/ui.js (column.format). vulnerability
Weakness · CWE (1)
- CWE-79 Improper Neutralization of Input During Web Page Generation weakness