CVE-2023-27070

TotalJS OpenPlatform is affected by a stored XSS in the platform name field introduced by commit b80b09d. Affected component: platform name input handling in OpenPlatform. Impact: attacker could execute arbitrary web scripts/HTML in the user’s browser. Exploit details are not described in these d...

CVE-2023-27069

TotalJS OpenPlatform (commit b80b09d) is affected by a stored XSS vulnerability in the account name field. The issue allows an attacker to inject crafted payloads to execute arbitrary web scripts/HTML on the victim’s browser. Reported across multiple sources (NVD, Red Hat, CNNVD, PRION, etc.), th...