Totaljs Cross-Site Scripting Vulnerability (CNVD-2022-82269)

Total Avengers Totaljs Framework is a Javascript-based code base for building web, desktop, service or IoT applications from Total Avengers, Slovakia. The application is similar to PHPs Laravel, Pythons Django, ASP.NET MVC for building Node applications.A cross-site scripting vulnerability exists in versions of Totaljs content management system prior to 2022-02-28. An attacker can exploit this vulnerability to execute arbitrary Web script or HTML by injecting a carefully crafted payload into the page name text field when creating a new page.