agentprime: cotontiEvery new CVE for cotonti.https://agentprime.io/CVE-2026-121553: Cotonti through 1.0.0 Predictable Validation Tokens via md5(microtime())https://agentprime.io/advisories/CVE-2026-121553/https://agentprime.io/advisories/CVE-2026-121553/CVSS 6.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 03 Nov 2026 15:17:11 GMTCVECVE-2026-101093: Cotonti through 1.0.0 Cross-Site Request Forgery via User Group Deletionhttps://agentprime.io/advisories/CVE-2026-101093/https://agentprime.io/advisories/CVE-2026-101093/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 28 Sep 2026 22:00:18 GMTCVECVE-2026-100524: Cotonti through 1.0.0 Cross-Site Request Forgery via Extensions Managerhttps://agentprime.io/advisories/CVE-2026-100524/https://agentprime.io/advisories/CVE-2026-100524/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 00:59:24 GMTCVECVE-2026-100523: Cotonti through 1.0.0 Open Redirect via message.php redirect parameterhttps://agentprime.io/advisories/CVE-2026-100523/https://agentprime.io/advisories/CVE-2026-100523/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 00:59:24 GMTCVECVE-2026-100522: Cotonti through 1.0.0 Reflected XSS via message.php lng parameterhttps://agentprime.io/advisories/CVE-2026-100522/https://agentprime.io/advisories/CVE-2026-100522/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 00:59:23 GMTCVECVE-2026-100521: Cotonti through 1.0.0 Reflected XSS via search highlight parameterhttps://agentprime.io/advisories/CVE-2026-100521/https://agentprime.io/advisories/CVE-2026-100521/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 26 Sep 2026 00:59:22 GMTCVECVE-2026-93873: Cotonti through 1.0.0 Cross-Site Request Forgery in the Contact Pluginhttps://agentprime.io/advisories/CVE-2026-93873/https://agentprime.io/advisories/CVE-2026-93873/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 19:56:38 GMTCVECVE-2026-93872: Cotonti 1.0.0 PHP Object Injection via Comments Plugin Edit Action cb Parameterhttps://agentprime.io/advisories/CVE-2026-93872/https://agentprime.io/advisories/CVE-2026-93872/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 19:56:37 GMTCVECVE-2026-93871: Cotonti through 1.0.0 Stored Open Redirect via Page redir: Prefixhttps://agentprime.io/advisories/CVE-2026-93871/https://agentprime.io/advisories/CVE-2026-93871/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 19:56:36 GMTCVECVE-2026-93870: Cotonti through 1.0.0 Cross-Site Request Forgery in the Ratings Plugin AJAX Handlerhttps://agentprime.io/advisories/CVE-2026-93870/https://agentprime.io/advisories/CVE-2026-93870/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 19:56:36 GMTCVECVE-2026-93869: Cotonti through 1.0.0 Open Redirect via Unanchored cot_url_check() Regexhttps://agentprime.io/advisories/CVE-2026-93869/https://agentprime.io/advisories/CVE-2026-93869/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 19:56:35 GMTCVECVE-2026-93868: Cotonti through 1.0.0 Predictable Password Recovery Token via Weak PRNGhttps://agentprime.io/advisories/CVE-2026-93868/https://agentprime.io/advisories/CVE-2026-93868/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 19:56:34 GMTCVEcriticalCVE-2026-91939: Cotonti 1.0.0 Comments Plugin PHP Object Injection via ci Parameterhttps://agentprime.io/advisories/CVE-2026-91939/https://agentprime.io/advisories/CVE-2026-91939/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 15 Sep 2026 20:56:45 GMTCVEcriticalCVE-2026-71294: Cotonti CMS Comments Plugin PHP Object Injection via Unrestricted unserialize() in Create/Edit Actionshttps://agentprime.io/advisories/CVE-2026-71294/https://agentprime.io/advisories/CVE-2026-71294/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Aug 2026 12:38:48 GMTCVECVE-2026-58144: Cotonti Siena 0.9.26 Stored XSS via PFS Module ntitle Parameterhttps://agentprime.io/advisories/CVE-2026-58144/https://agentprime.io/advisories/CVE-2026-58144/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jul 2026 22:07:11 GMTCVECVE-2026-58143: Cotonti Siena 0.9.26 CSRF via admin.php Config Update Endpointhttps://agentprime.io/advisories/CVE-2026-58143/https://agentprime.io/advisories/CVE-2026-58143/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 09 Jul 2026 22:04:22 GMTCVECVE-2026-55741: Cotonti CSRF in admin.config.php allows unauthorized configuration changeshttps://agentprime.io/advisories/CVE-2026-55741/https://agentprime.io/advisories/CVE-2026-55741/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 18 Jun 2026 06:04:19 GMTCVE