CVE-2025-44115: A vulnerability has been found in Cotonti Siena v0.9.25. Affected by this vulnerability is the file /admin.php?m=config&n=edit&o=core&p=title. The...
Description
A vulnerability has been found in Cotonti Siena v0.9.25. Affected by this vulnerability is the file /admin.php?m=config&n=edit&o=core&p=title. The manipulation of the value of title leads to cross-site scripting.
Classification
CVE ID: CVE-2025-44115
Affected Products
Vendor: n/a
Product: n/a
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.03% (probability of being exploited)
EPSS Percentile: 6.42% (scored less or equal to compared to others)
EPSS Date: 2025-06-03 (when was this score calculated)
References
https://nvd.nist.gov/vuln/detail/CVE-2025-44115https://github.com/Cotonti/Cotonti/issues/1650
https://github.com/Cotonti/Cotonti/issues/1834
https://gist.github.com/yA0-Z/9666b1a333607381ab8dfcc137f2b65c