Lucene search
Veracode Vulnerability DatabaseVERACODE:35584HistoryMay 18, 2022 - 1:14 p.m.
Cross-Site Scripting (XSS)
2022-05-1813:14:45
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
31
total.js vulnerability
javascript execution
cross-site scripting
EPSS
0.001
Percentile
21.4%
total.js is vulnerable to stored cross-site scripting. The vulnerability exists in upload function due to lack of sanitization which allows an attacker to execute arbitrary javascript via a javascript embedded PDF file.
Related
cve
cve
CVE-2022-30013
2022-05-16 14:15:08
prion
prion
Cross site scripting
2022-05-16 14:15:00
cvelist
cvelist
CVE-2022-30013
2022-05-16 13:29:33
osv
osv
CVE-2022-30013
2022-05-16 14:15:08
cnvd
cnvd
Total Avengers Totaljs Framework Cross-Site Scripting Vulnerability
2022-05-18 00:00:00
nvd
nvd
CVE-2022-30013
2022-05-16 14:15:08