What is GHSA-72p5-2r6g-fm6v?

GHSA-72p5-2r6g-fm6v is a security advisory published by GitHub Security Advisories with Medium severity. Moderate severity vulnerability that affects total.js

Which CVE IDs does GHSA-72p5-2r6g-fm6v cover?

GHSA-72p5-2r6g-fm6v covers the following CVE IDs: CVE-2019-10260. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-72p5-2r6g-fm6v?

GHSA-72p5-2r6g-fm6v has a CVSS v3 base score of 6.1, published by GitHub Security Advisories.

Which products are affected by GHSA-72p5-2r6g-fm6v?

GHSA-72p5-2r6g-fm6v affects 1 product, including: npm/total.js:\u003c= 3.3.0-12.

GHSA-72p5-2r6g-fm6vMediumCVSS 6.1

Moderate severity vulnerability that affects total.js

Vendor

GitHub Security Advisories

Published

April 2, 2019

Last Modified

January 9, 2023

🔗 CVE IDs covered (1)

CVE-2019-10260 →

📋 Description

Total.js CMS 12.0.0 has XSS related to themes/admin/views/index.html (item.message) and themes/admin/public/ui.js (column.format).

🎯 Affected products1

npm/total.js:<= 3.3.0-12

🔗 References (4)

https://nvd.nist.gov/vuln/detail/CVE-2019-10260
https://github.com/totaljs/cms/commit/75205f93009db3cf8c0b0f4f1fc8ab82d70da8ad
https://github.com/totaljs/cms/commit/8b9d7dada998c08d172481d9f0fc0397c4b3c78d
https://github.com/advisories/GHSA-72p5-2r6g-fm6v