Skip to content
OpenAdvisories

Product · cotonti.com

Cotonti Siena

1 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 5.4

    Cotonti Siena 0.9.19 - 'maintitle' Stored Cross-Site Scripting

    Cotonti Siena 0.9.19 contains a stored cross-site scripting vulnerability in the admin configuration panel's site title parameter. Attackers can inject malicious JavaScript code through the 'maintitle' parameter to execute scripts when administrators view the…