Description (CNA)
An issue in Total.js CMS v.1.0 allows a remote attacker to execute arbitrary code via the func.js file.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| n/a / n/a | affected n/a |
CWE
No CWE identifiers supplied.
References
- https://github.com/totaljs/cms/issues/49
- https://medium.com/%400x0d0x0a/cve-2024-48655-server-side-javascript-code-injection-in-total-js-cms-c5fc18359bdc
ADP enrichment
No English description supplied.
No references supplied.