TI-2025-28591 CVE-2025-44115 · GHSA-7wp3-36m3-58j5
A vulnerability has been found in Cotonti Siena v0.9.25.
Priority MEDIUM 58
A vulnerability has been found in Cotonti Siena v0.9.25.
Cotonti
Records27All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical3CVSS 9.0–10.0
CVSS high7CVSS 7.0–8.9
Exploited now
Cotonti records in CISA KEVNo Cotonti vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
6 records in Cotonti Siena · all components
TI-2024-16007 CVE-2024-24115 · GHSA-p25h-32f2-ffm3
A stored cross-site scripting (XSS) vulnerability in the Edit Page function of Cotonti…
Priority MEDIUM 58
A stored cross-site scripting (XSS) vulnerability in the Edit Page function of Cotonti CMS v0.9.24 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload.
TI-2021-22424 CVE-2021-47808 · GHSA-gqqp-x5qv-896x
Cotonti Siena 0.9.19 - 'maintitle' Stored Cross-Site Scripting
Priority MEDIUM 56
Cotonti Siena 0.9.19 contains a stored cross-site scripting vulnerability in the admin configuration panel's site title parameter.
TI-2013-04200 CVE-2013-4789 · GHSA-8x66-g6x3-phwh
SQL injection vulnerability in modules/rss/rss.php in Cotonti before 0.9.14 allows remote…
Priority LOW 38
SQL injection vulnerability in modules/rss/rss.php in Cotonti before 0.9.14 allows remote attackers to execute arbitrary SQL commands via the "c" parameter to index.php.
TI-2022-18835 CVE-2022-39840 · GHSA-679x-5396-mpwf
Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a direct message (DM).
Priority LOW 23
Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a direct message (DM).
TI-2022-18834 CVE-2022-39839 · GHSA-5655-f6hp-27hx
Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a forum post.
Priority LOW 23
Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a forum post.