Skip to content
OpenAdvisories
Medium · 5.4 CVE-2024-24115 EUVD-2024-21539GHSA-p25h-32f2-ffm3

A stored cross-site scripting (XSS) vulnerability in the Edit Page function of Cotonti CMS v0.9.24 allows authenticated attackers to execut…

Published Feb 8, 2024 · Updated Jun 17, 2025 · Assigned by mitre

Description

A stored cross-site scripting (XSS) vulnerability in the Edit Page function of Cotonti CMS v0.9.24 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload.

References