PT-2020-20623

Name of the Vulnerable Software and Affected Versions Total.js CMS version 13 Description The issue allows remote attackers to execute arbitrary code via a POST to the "/admin/api/widgets/" API endpoint. Recommendations For Total.js CMS version 13, consider restricting access to the...