CVE-2026-100522 in Cotontiinformação

Sumário

de MITRE • 26/09/2026

Cotonti through 1.0.0 contains a reflected cross-site scripting vulnerability in message.php where the lng parameter is not properly escaped before output in the confirmation dialog. Unauthenticated attackers can craft malicious links with script payloads in the lng parameter to execute arbitrary JavaScript in victim browser sessions.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

Responsável

VulnCheck

Reservar

26/09/2026

Divulgação

26/09/2026

Moderação

aceite

Entrada

VDB-410496

CPE

pronto

EPSS

0.00000

KEV

não

Atividades

muito baixo

Fontes

MITREhttps://www.cve.org/CVERecord?id=CVE-2026-100522
NVDhttps://nvd.nist.gov/vuln/detail/CVE-2026-100522
CVE Detailshttps://www.cvedetails.com/cve/CVE-2026-100522/

◂ VoltarVisão GeralPróximo ▸

Do you want to use VulDB in your project?

Use the official API to access entries easily!