CVE-2025-10940

A vulnerability was found in Total.js CMS 1.0.0. Affected by this vulnerability is the function layoutssave of the file /admin/ of the component Layout Page. Performing manipulation of the argument HTML results in cross site scripting. It is possible to initiate the attack remotely. The exploit h...

CVE-2025-10940 Total.js CMS Layout admin layouts_save cross site scripting

A vulnerability was found in Total.js CMS 1.0.0. Affected by this vulnerability is the function layoutssave of the file /admin/ of the component Layout Page. Performing manipulation of the argument HTML results in cross site scripting. It is possible to initiate the attack remotely. The exploit h...

CVE-2025-10940

Total.js CMS 1.0.0 is affected by a cross-site scripting vulnerability in the layouts_save function under /admin/ of the Layout Page. The issue arises from manipulation of the HTML argument, enabling remote initiation of an XSS attack. Public exploit details exist (PROOF-OF-CONCEPT in some source...