Cotonti Siena

2 CVEs product

Monthly

Sort: Newest CVSS Score EPSS Score Oldest
CVE-2021-47808 MEDIUM POC This Month

Cotonti Siena 0.9.19 contains a stored cross-site scripting vulnerability in the admin configuration panel's site title parameter. Attackers can inject malicious JavaScript code through the 'maintitle' parameter to execute scripts when administrators view the page. [CVSS 5.4 MEDIUM]

XSS Cotonti Siena
NVD Exploit-DB
CVSS 3.1
5.4
EPSS
0.0%
CVE-2025-44115 MEDIUM POC This Month

A vulnerability has been found in Cotonti Siena v0.9.25. Affected by this vulnerability is the file /admin.php?m=config&n=edit&o=core&p=title. The manipulation of the value of title leads to cross-site scripting.

PHP XSS Cotonti Siena
NVD GitHub
CVSS 3.1
5.4
EPSS
0.0%
CVE-2021-47808
EPSS 0% CVSS 5.4
MEDIUM POC This Month

Cotonti Siena 0.9.19 contains a stored cross-site scripting vulnerability in the admin configuration panel's site title parameter. Attackers can inject malicious JavaScript code through the 'maintitle' parameter to execute scripts when administrators view the page. [CVSS 5.4 MEDIUM]

XSS Cotonti Siena
NVD Exploit-DB
CVE-2025-44115
EPSS 0% CVSS 5.4
MEDIUM POC This Month

A vulnerability has been found in Cotonti Siena v0.9.25. Affected by this vulnerability is the file /admin.php?m=config&n=edit&o=core&p=title. The manipulation of the value of title leads to cross-site scripting.

PHP XSS Cotonti Siena
NVD GitHub

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy