Cotonti.com vulnerabilities

🔔 Create alert RSS

Published CVEs affecting Cotonti.com products: 1 record(s), with severity, exploitation and fixes.

Cotonti Siena 1

Exploited only (KEV) →

CVE-2021-47808 Medium · 5.4 CWE-79 Jan 15, 2026

Cotonti Siena 0.9.19 - 'maintitle' Stored Cross-Site Scripting

Cotonti Siena 0.9.19 contains a stored cross-site scripting vulnerability in the admin configuration panel's site title parameter. Attackers can inject malicious JavaScript code through the 'maintitle' parameter to execute scripts when administrators view the page.