Cross site scripting

2022-09-0506:15:00

PRIOn knowledge base

www.prio-n.com

cotonti siena 0.9.20

stored xss

direct message

nvd

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

24.8%

Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a direct message (DM).

CPENameOperatorVersion
cotonti_sienaeq0.9.20

CPE	Name	Operator	Version
	cotonti_siena	eq	0.9.20

References

github.com/Cotonti/Cotonti/issues/1660