VulnerabilityAnalyzed
CVE-2025-11019
A vulnerability has been found in Total.js CMS up to 19.9.0.
LOW 1.9EPSS 0.24%
Does this matter?
Lower severity and a low EPSS score (0.24%). Track it; it rarely justifies an emergency change on its own.
Description
A vulnerability has been found in Total.js CMS up to 19.9.0. This impacts an unknown function of the component Files Menu. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.
- CVSS 4.0
- 1.9 LOWCVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/M
- EPSS
- 0.24% probability · 15th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-79, CWE-94
- Affected
- totaljs/total.js
- Source
- cna@vuldb.com
References
- https://vuldb.com/?ctiid.325962Permissions Required, VDB Entry
- https://vuldb.com/?id.325962Third Party Advisory, VDB Entry
- https://vuldb.com/?submit.651427Third Party Advisory, VDB Entry
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.