CVE-2021-47808

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2021-47808

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-47808.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2021-47808

Published

2026-01-16T00:16:25.707Z

Modified

2026-08-07T17:03:19.071939Z

Severity

5.1 (Medium) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X CVSS Calculator

Summary

[none]

Details

Cotonti Siena 0.9.19 contains a stored cross-site scripting vulnerability in the admin configuration panel's site title parameter. Attackers can inject malicious JavaScript code through the 'maintitle' parameter to execute scripts when administrators view the page.

References

Affected packages

Git / github.com/cotonti/cotonti

Affected ranges

Type

GIT

Repo

https://github.com/cotonti/cotonti

Events

Introduced

79bf592175f89fd8e537671169fe70fd3a34fe9c

Last affected

79bf592175f89fd8e537671169fe70fd3a34fe9c

Database specific

Show details

{
    "cpe": "cpe:2.3:a:cotonti:cotonti_siena:0.9.19:-:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0.9.19-NA"
        },
        {
            "last_affected": "0.9.19-NA"
        }
    ],
    "source": "CPE_STRING"
}

Affected versions

0.*

0.9.19

0.9.19-NA

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-47808.json"