CVE-2019-10260: Improper Neutralization of Input During Web Page Generation

Total.js CMS 12.0.0 has XSS related to themes/admin/views/index.html item.message and themes/admin/public/ui.js column.format...