CVE-2025-44115 – Cotonti Siena Cross-Site Scripting Vulnerability

The following table lists the changes that have been made to the
CVE-2025-44115 vulnerability over time.

Vulnerability history details can be useful for understanding the evolution
of a vulnerability, and for identifying the most recent changes that may
impact the vulnerability’s severity, exploitability, or other characteristics.

  • New CVE Received
    by [email protected]

    Jun. 02, 2025

    Action Type Old Value New Value
    Added Description A vulnerability has been found in Cotonti Siena v0.9.25. Affected by this vulnerability is the file /admin.php?m=config&n=edit&o=core&p=title. The manipulation of the value of title leads to cross-site scripting.
    Added Reference https://gist.github.com/yA0-Z/9666b1a333607381ab8dfcc137f2b65c
    Added Reference https://github.com/Cotonti/Cotonti/issues/1650
    Added Reference https://github.com/Cotonti/Cotonti/issues/1834
Share the Post:

Related Posts