Totaljs Messenger - for Node.js

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:totaljs:messenger:-:*:*:*:*:node.js:*:*

part: a version: - update: *

VendorTotaljs (c2c15978-184c-5682-8600-bc2601bf8f6a)
ProductMessenger (bdac6d3b-bc7b-5633-a0a4-e7ff739ecce6)
Edition*
Language*
Software edition*
Target softwarenode.js
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/totaljs/messenger purl2cpe 2026-06-01 10:16:59.829778

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2023-30097 vulnerable 2026-06-08 06:02:43.836108 Details available
A stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the private task field.
Published: 2023-05-04T00:00:00.000Z
Updated: 2025-01-29T20:44:39.547Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30096 vulnerable 2026-06-08 06:02:43.835584 Details available
A stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the user information field.
Published: 2023-05-04T00:00:00.000Z
Updated: 2025-01-29T20:45:15.362Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2023-30095 vulnerable 2026-06-08 06:02:43.834737 Details available
A stored cross-site scripting (XSS) vulnerability in TotalJS messenger commit b6cf1c9 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the channel description field.
Published: 2023-05-04T00:00:00.000Z
Updated: 2025-01-29T20:45:48.946Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.