Total.js

Products

ProductCVEsExploitedLatest
CMS2–Sep 26, 2025
Flow1–Oct 13, 2025

Exploited and recent CVEs

  • CVE-2025-11655 Medium 4.7 Total.js Flow SVG File unrestricted upload 0.3%
  • CVE-2025-11019 Low 2.4 Total.js CMS Files Menu cross site scripting 0.2%
  • CVE-2025-10940 Low 2.4 Total.js CMS Layout admin layouts_save cross site scripting 0.3%