Cross site scripting

2022-05-1614:15:00

PRIOn knowledge base

www.prio-n.com

0.001 Low

EPSS

Percentile

21.4%

JSON

A stored cross-site scripting (XSS) vulnerability in the upload function of totaljs CMS 3.4.5 allows attackers to execute arbitrary web scripts via a JavaScript embedded PDF file.

CPENameOperatorVersion
total.jseq3.4.5

CPE	Name	Operator	Version
	total.js	eq	3.4.5

References

github.com/totaljs/framework

www.youtube.com/watch?v=E2784z7Bu2c

0.001 Low

EPSS

Percentile

21.4%

JSON

Related for PRION:CVE-2022-30013