cotonti/cotonti vulnerabilities (Packagist)

4 vulnerabilities.

• cotonti/cotonti Packagist Cotonti stored XSS via PFS folder title CVE-2026-55746 7.0 HighJune 18, 2026
• cotonti/cotonti Packagist Cotonti CSRF in PFS folder edit allows unauthorized folder modification CVE-2026-55745 5.3 MediumJune 18, 2026
• cotonti/cotonti Packagist Cotonti CSRF in PFS allows forced arbitrary file upload CVE-2026-55744 8.6 HighJune 18, 2026
• cotonti/cotonti Packagist Cotonti CSRF in admin.rights.php allows privilege escalation CVE-2026-55742 9.4 CriticalJune 18, 2026