Vulnerabilities > Totaljs > Openplatform

DATE CVE VULNERABILITY TITLE RISK
2023-03-14 CVE-2023-27069 Cross-site Scripting vulnerability in Totaljs Openplatform 20230216
A stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the account name field.
network
low complexity
totaljs CWE-79
5.4
2023-03-14 CVE-2023-27070 Cross-site Scripting vulnerability in Totaljs Openplatform 20230216
A stored cross-site scripting (XSS) vulnerability in TotalJS OpenPlatform commit b80b09d allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the platform name field.
network
low complexity
totaljs CWE-79
5.4