CVE-2026-93869 - Cotonti through 1.0.0 Open Redirect via Unanchored cot_url_check() Regex
Brief
CVE ID : CVE-2026-93869
Published : Sept. 18, 2026, 8:17 p. m.
- 38 minutes ago
Description : Cotonti through 1.
- 0 contains an open redirect vulnerability in the cot_url_check() function that validates redirect destinations using a regular expression lacking an end-of-string anchor. Attackers can bypass the redirect guard by supplying hostnames beginning with the site domain to redirect users to attacker-controlled hosts through the ratings plugin or other redirect callers.
Severity: 6.1
- MEDIUM
Visit the link for more details, such as CVSS details, affected products, timeline, and more...