Skip to content
OpenAdvisories

Archive

5 September 2019

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2019-15954 Public exploit EPSS 79%

    Total.js CMS RCE Vulnerability

    An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the widgets privilege can gain achieve Remote Command Execution (RCE) on the remote server by creating a malicious widget with a special tag containing JavaScript code that will be eva…