What’s Vulnerable › Products

total.js vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 2 published in the last 12 months.

Check whether your total.js version is affected

Latest total.js vulnerabilities

• CVE-2025-11019 — Total.js CMS Files Menu cross site scripting (CVSS 4.8)
• CVE-2025-10940 — Total.js CMS Layout admin layouts_save cross site scripting (CVSS 4.8)
• CVE-2024-48655 — (CVSS 8.8)
• CVE-2022-44019 — (CVSS 8.8)
• CVE-2022-41392 — (CVSS 5.4)
• CVE-2022-30013 — (CVSS 5.4)
• CVE-2021-32831 — Code injection in total.js (CVSS 7.2)
• CVE-2021-23389 — Arbitrary Code Execution (CVSS 9.8)
• CVE-2021-23344 — Remote Code Execution (RCE) (CVSS 9.8)
• CVE-2020-28495 — Prototype Pollution (CVSS 7.5)
• CVE-2020-28494 — Command Injection (CVSS 7.5)
• CVE-2019-8903 — (CVSS 7.5)