VendorsTotaljstotal.jsany version
Vulnerabilities

Totaljs Total.js any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

8CVEs
CVE-2021-23344
Remote Code Execution (RCE)
Published 2021-03-04 · Modified
9.8EPSS 0.049
CVE-2021-23389
Arbitrary Code Execution
Published 2021-07-12 · Modified
9.8EPSS 0.036
CVE-2022-44019
In Total.js 4 before 0e5ace7, /api/common/ping can achieve remote command execution via shell metacharacters in the host parameter.
Published 2022-10-29 · Modified
8.8EPSS 0.022
CVE-2020-28494
Command Injection
Published 2021-02-02 · Modified
8.6EPSS 0.017
CVE-2019-8903
index.js in Total.js Platform before 3.2.3 allows path traversal.
Published 2019-02-18 · Modified
7.5EPSS 0.721
CVE-2020-28495
Prototype Pollution
Published 2021-02-02 · Modified
7.5EPSS 0.036
CVE-2021-32831
Code injection in total.js
Published 2021-08-30 · Modified
7.5EPSS 0.015
CVE-2025-11019
Total.js CMS Files Menu cross site scripting
Published 2025-09-26 · Analyzed
4.8EPSS 0.002