CVE-2019-15953

CVE-2019-15953 describes a critical privilege escalation vulnerability in Total.js CMS version 12.0.0. An authenticated user with limited privileges can bypass front-end access controls by directly interacting with the API, leading to both vertical and horizontal privilege escalation. This vulnerability has a CVSS score of 8.8 (High), indicating that it is easily exploitable over the network with low attack complexity, and can result in high impact to confidentiality, integrity, and availability. While no public exploits or active exploitation have been reported, and community discussion is minimal, the inherent risk remains significant.