Total Avengers Totaljs Framework Cross-Site Scripting Vulnerability

Total Avengers Totaljs Framework is a Javascript-based code base for building web, desktop, service or IoT applications from Total Avengers, Slovakia. The application is similar to PHPs Laravel, Pythons Django, ASP.NET MVC for building Node applications.A cross-site scripting vulnerability exists in Total Avengers Totaljs Framework version 3.4.5, which stems from a stored cross-site scripting issue in the upload functionality. An attacker can execute arbitrary Web scripts via PDF files embedded with JavaScript.