CVE-2021-47808

MEDIUM

Cotonti Siena 0.9.19 - 'maintitle' Stored Cross-Site Scripting

Title source: CVE List
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2021-47808 has a selected CVSS score of 5.1 (medium); EIP currently links 1 catalogued exploit.

Description

Cotonti Siena 0.9.19 contains a stored cross-site scripting vulnerability in the admin configuration panel's site title parameter. Attackers can inject malicious JavaScript code through the 'maintitle' parameter to execute scripts when administrators view the page.

Description source: CVE List

Exploitation context

Available material

Catalogued exploits
1

CISA SSVC decision

ExploitationPoC
AutomatableNo
Technical impactPartial

CISA Coordinator · SSVC 2.0.3 · Evaluated Jan 16, 2026 · Source: CVE List

Affected products and versions

1
ProductSourceVersion range

Cotonti Siena

Browse cotonti.com / Cotonti Siena
CVE List0.9.19affected

Proofs of concept

1

Catalogued exploits

ExploitDBCotonti Siena 0.9.19 - 'maintitle' Stored Cross-Site ScriptingExploitDB exploitby Fatih İLGİNNot analyzed1 file
ExploitDB
PoC details

References

5