Description Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a forum post. References https://github.com/Cotonti/Cotonti/issues/1661