Skip to content
OpenAdvisories

Package · npm

total4

5 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 9.9
    CVE-2019-15954 Public exploit EPSS 79%

    Total.js CMS RCE Vulnerability

    An issue was discovered in Total.js CMS 12.0.0. An authenticated user with the widgets privilege can gain achieve Remote Command Execution (RCE) on the remote server by creating a malicious widget with a special tag containing JavaScript code that will be eva…

    total4 npm