Skip to content
OpenAdvisories

Vendor

cotonti.com

1 known vulnerabilities.

Products

1 result · Clear filters · Feed

  • Medium 5.4

    Cotonti Siena 0.9.19 - 'maintitle' Stored Cross-Site Scripting

    Cotonti Siena 0.9.19 contains a stored cross-site scripting vulnerability in the admin configuration panel's site title parameter. Attackers can inject malicious JavaScript code through the 'maintitle' parameter to execute scripts when administrators view the…