Search

CVE-2026-93869 - Cotonti through 1.0.0 Open Redirect via Unanchored cot_url_check() Regex

CVE ID : CVE-2026-93869 Published : Sept. 18, 2026, 8:17 p. m. • 38 minutes ago Description : Cotonti through 1. 0. 0 contains an open redirect vulnerability in the cot_url_check() function that validates redirect destinations using a regular expression lacking an end-of-string anchor. Attackers can bypass the redirect guard by supplying hostnames beginning with the site domain to redirect users to attacker-controlled hosts through the ratings plugin or other redirect callers. Severity: 6.1 • MEDIUM Visit the link for more details, such as CVSS details, affected products, timeline, and more...