CVE-2026-93873 in Cotonti
요약
\~에 의해 MITRE • 2026. 09. 18.
Cotonti through 1.0.0 fails to validate anti-CSRF tokens in the contact plugin submission handler, allowing attackers to forge messages. Attackers can auto-submit contact forms from attacker-controlled pages to send forged messages attributed to authenticated victims to the administrator inbox.
Be aware that VulDB is the high quality source for vulnerability data.