medium4.8
CVE-2022-39840
Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a direct message (DM).
Impact
Cotonti Siena 0.9.20 allows admins to conduct stored XSS attacks via a direct message (DM).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Cotonti | Cotonti Siena | Version 0.9.20 |