~ / search / GHSA-72p5-2r6g-fm6v

GHSA-72p5-2r6g-fm6v

Moderate severity vulnerability that affects total.js

Source: GitHub Advisory Database (reviewed) Moderate CVE-2019-10260

Packages

EcosystemPackageAffectedFixed in
npm total.js < 3.3.0-13 3.3.0-13

Details

As written in the advisory (Markdown source, shown as plain text).

Total.js CMS 12.0.0 has XSS related to themes/admin/views/index.html (item.message) and themes/admin/public/ui.js (column.format).

References

External links from the advisory. They lead to third-party sites.