CVE-2026-93869 Details

An open redirect vulnerability has been identified in Cotonti versions through 1.0.0. The issue arises in the 'cot_url_check()' function, which validates redirect destinations using a regular expression that lacks an end-of-string anchor. This flaw allows attackers to bypass the redirect validation by using hostnames that begin with the site's domain, redirecting users to attacker-controlled sites. The vulnerability can be exploited through the ratings plugin or other functions that handle redirects.

The vulnerability can be addressed by modifying the regular expression used in the 'cot_url_check()' function to include an end-anchor, ensuring that only complete domain matches are accepted.