CVE-2026-93873 - Cotonti through 1.0.0 Cross-Site Request Forgery in the Contact Plugin
Brief
CVE ID : CVE-2026-93873
Published : Sept. 18, 2026, 8:17 p. m.
- 38 minutes ago
Description : Cotonti through 1.
- 0 fails to validate anti-CSRF tokens in the contact plugin submission handler, allowing attackers to forge messages. Attackers can auto-submit contact forms from attacker-controlled pages to send forged messages attributed to authenticated victims to the administrator inbox.
Severity: 5.3
- MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...