Description
Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the contact plugin submission handler, allowing attackers to forge messages. Attackers can auto-submit contact forms from attacker-controlled pages to send forged messages attributed to authenticated victims to the administrator inbox.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Cotonti | Cotonti | ≤ 1.0.0 | — |
References
- https://github.com/Cotonti/Cotonti/issues/1895 issue-tracking
- https://github.com/Cotonti/Cotonti/pull/1903 patch issue-tracking
- https://github.com/Cotonti/Cotonti/blob/1.0.0/plugins/contact/contact.php technical-description
- https://github.com/Cotonti/Cotonti product
- VulnCheck Advisory: Cotonti through 1.0.0 Cross-Site Request Forgery in the Contact Plugin third-party-advisory