Cotonti Cotonti Siena vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Cotonti Cotonti Siena: 1 record(s), with affected versions and fixes.
cpe:2.3:a:cotonti:cotonti_siena

CVE-2021-47808 Medium · 5.4 CWE-79 Jan 15, 2026

Cotonti Siena 0.9.19 - 'maintitle' Stored Cross-Site Scripting

Cotonti Siena 0.9.19 contains a stored cross-site scripting vulnerability in the admin configuration panel's site title parameter. Attackers can inject malicious JavaScript code through the 'maintitle' parameter to execute scripts when administrators view the page.