2 matches found
CVE-2022-26565
A cross-site scripting XSS vulnerability in Totaljs all versions before commit 95f54a5commit, allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Name text field when creating a new page...
4.8CVSS6AI score0.00541EPSS
SaveExploits1References3
CVE-2022-26565
A cross-site scripting XSS vulnerability in Totaljs all versions before commit 95f54a5commit, allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Page Name text field when creating a new page...
4.8CVSS5.9AI score0.00541EPSS
SaveExploits1References2
20