CVE-2019-10260
N/A
Published: March 28, 2019 at 04:24 PM UTC
Updated: June 17, 2026 at 02:10 AM UTC
2 products affected across 1 vendorTotal.js CMSTotal.js
Using N/A by N/A?
Get instant alerts when new vulnerabilities affect N/A - before attackers find them.
Real-time alertsTrack your software stackFree plan available
Severity
N/A
Exploit prediction
EPSS 0.9%
Description
Total.js CMS 12.0.0 has XSS related to themes/admin/views/index.html (item.message) and themes/admin/public/ui.js (column.format).
Remediation
No guide yetNo remediation guidance has been written for this CVE yet. What the record does show:
References (2)
x_refsource_MISCPatchThird Party Advisory
Source: [email protected]
https://github.com/totaljs/cms/commit/75205f93009db3cf8c0b0f4f1fc8ab82d70da8adx_refsource_MISCPatchThird Party Advisory
Source: [email protected]
https://github.com/totaljs/cms/commit/8b9d7dada998c08d172481d9f0fc0397c4b3c78dQuick Info
StatusMODIFIED
CWE
CWE-79
Get alerted
Stop reading CVE feeds looking for your own stack
Track the products you run and VulnTracker tells you when a new CVE affects them — with what is known about fixing it, and nothing about the rest.
Free plan, no card