Approved changes feed: RSS · Atom

cpe:2.3:a:cotonti.com:cotonti_siena:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorCotonti.Com (244a0a4a-8e62-5466-b604-79a80380db84)
ProductCotonti Siena (e06a39ec-446a-5e2e-9f8b-4ac93b870376)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2021-47808 vulnerable 2026-06-08 05:38:07.701753 Cotonti Siena 0.9.19 - 'maintitle' Stored Cross-Site Scripting
MEDIUM (5.4)
Cotonti Siena 0.9.19 contains a stored cross-site scripting vulnerability in the admin configuration panel's site title parameter. Attackers can inject malicious JavaScript code through the 'maintitle' parameter to execute scripts when administrators view the page.
Published: 2026-01-15T23:25:51.952Z
Updated: 2026-04-07T14:06:15.163Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.