Lucene search
K

7 matches found

EUVD
EUVD
added 2025/10/03 8:7 p.m.1 views

EUVD-2025-31081

Malicious code in bioql PyPI...

4.8CVSS4AI score0.0002EPSS
Exploits0References4
NVD
NVD
added 2025/09/25 11:15 a.m.1 views

CVE-2025-10940

A vulnerability was found in Total.js CMS 1.0.0. Affected by this vulnerability is the function layoutssave of the file /admin/ of the component Layout Page. Performing manipulation of the argument HTML results in cross site scripting. It is possible to initiate the attack remotely. The exploit h...

4.8CVSS0.0002EPSS
Exploits0References3
OSV
OSV
added 2025/09/25 11:15 a.m.1 views

CVE-2025-10940

A vulnerability was found in Total.js CMS 1.0.0. Affected by this vulnerability is the function layoutssave of the file /admin/ of the component Layout Page. Performing manipulation of the argument HTML results in cross site scripting. It is possible to initiate the attack remotely. The exploit h...

4.8CVSS5.6AI score
Exploits0References3
Cvelist
Cvelist
added 2025/09/25 10:32 a.m.6 views

CVE-2025-10940 Total.js CMS Layout admin layouts_save cross site scripting

A vulnerability was found in Total.js CMS 1.0.0. Affected by this vulnerability is the function layoutssave of the file /admin/ of the component Layout Page. Performing manipulation of the argument HTML results in cross site scripting. It is possible to initiate the attack remotely. The exploit h...

4.8CVSS0.0002EPSS
Exploits0References3
CVE
CVE
added 2025/09/25 10:32 a.m.7 views

CVE-2025-10940

Total.js CMS 1.0.0 is affected by a cross-site scripting vulnerability in the layouts_save function under /admin/ of the Layout Page. The issue arises from manipulation of the HTML argument, enabling remote initiation of an XSS attack. Public exploit details exist (PROOF-OF-CONCEPT in some source...

4.8CVSS3.3AI score0.0002EPSS
Exploits0References3Affected Software1
CNNVD
CNNVD
added 2025/09/25 12:0 a.m.1 views

Total.js CMS 代码注入漏洞

Total.js CMS is a NoSQL database-based content management system CMS from Total.js. A code injection vulnerability exists in Total.js CMS version 1.0.0, which stems from incorrect manipulation of the parameter HTML of the function layoutssave in the component Layout Page in the file /admin/, whic...

4.8CVSS4.1AI score0.0002EPSS
Exploits0References3
Positive Technologies
Positive Technologies
added 2025/09/25 12:0 a.m.2 views

PT-2025-39359

Name of the Vulnerable Software and Affected Versions Total.js CMS version 1.0.0 Description A cross site scripting issue exists in Total.js CMS version 1.0.0. The issue is located in the layouts save function within the /admin/ file of the Layout Page component. Manipulation of the HTML argument...

4.8CVSS3.1AI score0.0002EPSS
Exploits0References8
Rows per page
Query Builder