Repository navigation
Security: totalcms/cms
Security
No security policy detected
This project has not set up a SECURITY.md file yet.
Report a vulnerability-
Uploaded HTML files execute as same-origin contentGHSA-f354-xm96-5p3w published
Nov 3, 2026 by joeworkmanModerate -
Protected files are served without their protection through raw upload URLsGHSA-4852-hjgf-c7q5 published
Nov 3, 2026 by joeworkmanHigh -
Path traversal in public upload URLs exposes internal data filesGHSA-7p83-8x29-j3j3 published
Nov 3, 2026 by joeworkmanHigh -
Multiple authentication and access-control weaknessesGHSA-3wpr-fj3p-fgr2 published
Nov 3, 2026 by joeworkmanHigh -
Server-side request forgery in save-from-URLGHSA-x3vj-hq6f-h3jx published
Nov 3, 2026 by joeworkmanHigh -
Server-side template injection in Twig callback filters leads to remote code executionGHSA-95hr-9gqg-c9jw published
Nov 3, 2026 by joeworkmanHigh
Learn more about advisories related to totalcms/cms in the GitHub Advisory Database