Mirandabr

**Name of the Vulnerable Software and Affected Versions** Total.js CMS versions up to 19.9.0 **Description** A flaw exists in Total.js CMS that allows for cross site scripting through manipulation of an unknown function within the Files Menu component. This issue can be exploited remotely, and details about the exploit are publicly available. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.