| tiêu đề | Total.js CMS 10 Open Redirect |
|---|
| Mô tả | Total.js Flow v10 (Flow 1.0.0, Total.js v5012) is vulnerable to Cross-Site Scripting (XSS) and Open Redirect. During page creation, the application allows content to reference files previously uploaded to the system (uploads). It was possible to upload images containing malicious payloads (SVGs with onload / <script> and HTML/meta tags for open redirect). When creating a page and referencing these images in the editor/layout, clicking the referenced image causes the file to be loaded and rendered inline by the browser, executing the stored payload. As a result, Stored XSS and Open Redirect can be triggered via user-uploaded files.
PoC:
Upload an image containing an XSS or Open Redirect payload. Then go to http://localhost:8000/admin/nav/, click Main > Create link > Browser files, and select the images with the payloads. In http://localhost:8000/admin/pages/, create the page and trigger the reference titles — this flow allows exploitation of Cross-Site Scripting (XSS) and Open Redirect vulnerabilities. |
|---|
| Nguồn | ⚠️ http://localhost:8000/admin/pages/ |
|---|
| Người dùng | Edcarlos (UID 53778) |
|---|
| Đệ trình | 30/09/2025 05:52 (cách đây 12 các tháng) |
|---|
| Kiểm duyệt | 12/10/2025 08:30 (12 days later) |
|---|
| Trạng thái | Bản sao |
|---|
| Mục VulDB | 328072 [Total.js Flow đến 673ef9144dd25d4f4fd4fdfda5af27f230198924 SVG File nâng cao đặc quyền] |
|---|
| điểm | 0 |
|---|