CVE-2022-39840

Published September 5th, 2022

View on NVD ↗

CVSS v3

4.8

MEDIUM

CVSS v2

N/A

Affected

1

PROJECT

Description

Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a direct message (DM).

Cotonti/Cotonti

Fast, reliable and flexible PHP CMF/CMS

GitHub

101