NA

CVE-2024-24115

Published: 08/02/2024 Updated: 15/02/2024
CVSS v3 Base Score: 5.4 | Impact Score: 2.7 | Exploitability Score: 2.3
VMScore: 0

Vulnerability Summary

A stored cross-site scripting (XSS) vulnerability in the Edit Page function of Cotonti CMS v0.9.24 allows authenticated malicious users to execute arbitrary web scripts or HTML via a crafted payload.

Vulnerable Product Search on Vulmon Subscribe to Product

cotonti siena 0.9.24

Github Repositories

About Me Welcome to the my Security Research page I am a passionate bug hunter and security researcher, dedicated to discovering vulnerabilities and contributing to a safer digital world Follow me on Twitter Latest Discoveries CVE-2023-47350 Cross-Site Request Forgery (CSRF) vulnerability in the user password update functionality in SwiftyEdit CMS v112 Read More CVE