CVE-2026-93871

MEDIUM 5.4

Cotonti through 1.0.0 Stored Open Redirect via Page redir: Prefix

CVSS Score

5.4

EPSS Score

0.0%

EPSS Percentile

0th

Cotonti through 1.0.0 fails to validate redirect destinations in page bodies prefixed with redir:, allowing authenticated users with page creation or edit permissions to store redirects to arbitrary external hosts. Attackers can craft pages on trusted domains that redirect visitors to malicious sites for phishing attacks without administrative privileges.

CWE	CWE-601
Vendor	cotonti
Product	cotonti
Published	Sep 18, 2026

Stay Ahead of the Next One

Get instant alerts for cotonti cotonti

Be the first to know when new medium vulnerabilities affecting cotonti cotonti are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

Required

Scope

Changed

Confidentiality

Low

Integrity

Low

Availability

None

Affected Versions

Cotonti / Cotonti

0 ≤ 1.0.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

github.com: https://github.com/Cotonti/Cotonti/issues/1893 github.com: https://github.com/Cotonti/Cotonti/pull/1901 github.com: https://github.com/Cotonti/Cotonti/blob/1.0.0/modules/page/inc/page.main.php github.com: https://github.com/Cotonti/Cotonti vulncheck.com: https://www.vulncheck.com/advisories/cotonti-through-1.0.0-stored-open-redirect-via-page-redir-prefix

Credits

🔍 Harsh Raj Singhania