CNNVD-202509-4006 Information
Sep 25, 2025
cve
CNNVD ID
CNNVD-202509-4006
Related CVE
- CNNVD Published: 2025-09-25
Description (Chinese)
Total.js CMS是Total.js的一套基于NoSQL数据库的内容管理系统（CMS）。 Total.js CMS 1.0.0版本存在代码注入漏洞，该漏洞源于对文件/admin/中组件Layout Page的函数layouts_save的参数HTML的错误操作，可能导致跨站脚本攻击。
Description (English)
Total.js CMS is a content management system (CMS) based on the NOSQL database of Total.js. Version Total.js CMS 1.0.0 contains a code-injecting loophole, which results from an error in the action HTML of the function playouts save of the file/admin/central component Layout Page, which may result in a cross-stop script attack.
Hazard Level
Critical
Vulnerability Type
代码注入
Affected Vendor
Total.js
Published
2025-09-25
Last Modified
2026-02-24
References
https://vuldb.com/?ctiid.325810 https://vuldb.com/?id.325810 https://vuldb.com/?submit.651867
Share on: