Security Advisory
CVE-2021-47808
CVE vulnerability detail - eXtreme Datacenter Security Operations
Description
Cotonti Siena 0.9.19 contains a stored cross-site scripting vulnerability in the admin configuration panel's site title parameter. Attackers can inject malicious JavaScript code through the 'maintitle' parameter to execute scripts when administrators view the page.