← All advisories

High severity8.8NVD Advisory· Published Oct 25, 2024· Updated Jun 17, 2026

CVE-2024-48655

CVE-2024-48655

Description

An issue in Total.js CMS v.1.0 allows a remote attacker to execute arbitrary code via the func.js file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Totaljs/Totaljs
cpe:2.3:a:totaljs:total.js:1.0.0:*:*:*:*:node.js:*:*
Total.js/CMSdescription
Totaljs/CMSllm-fuzzy
Range: =1.0

Patches

Vulnerability mechanics

References

2

github.com/totaljs/cms/issues/49nvdExploitIssue TrackingVendor Advisory
medium.com/%400x0d0x0a/cve-2024-48655-server-side-javascript-code-injection-in-total-js-cms-c5fc18359bdcnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.