VendorsTotaljsopenplatformall versions
Vulnerabilities

Totaljs Openplatform 2023-02-16 for Node.js

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

2CVEs
CVE-2023-27069
A stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the account name field.
Published 2023-03-14 · Modified
5.4EPSS 0.005
CVE-2023-27070
A stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field.
Published 2023-03-14 · Modified
5.4EPSS 0.005