Headline
GHSA-jj45-24rw-v6jw: Cross-site scripting in TotalJS
A stored cross-site scripting (XSS) vulnerability in TotalJS allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field in the settings module.
Cross-site scripting in TotalJS
High severity GitHub Reviewed Published May 4, 2023 to the GitHub Advisory Database • Updated May 5, 2023
Related news
A stored cross-site scripting (XSS) vulnerability in TotalJS Flow v10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field in the settings module.
A stored cross-site scripting (XSS) vulnerability in TotalJS Flow v10 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field in the settings module.