Cotonti through version 1.0.0 fails to validate redirect destinations in page bodies that start with the prefix 'redir:'. Authenticated users who have permissions to create or edit pages can exploit this flaw to store redirects pointing to arbitrary external hosts. This vulnerability enables attackers to craft pages on trusted domains that redirect visitors to malicious sites, potentially enabling phishing attacks. The CVSS 3.1 base score is 5.4 (medium severity), with attack vector network, low attack complexity, requiring low privileges and user interaction, and impacts confidentiality and integrity with no impact on availability. No patch or remediation information is provided in the input data.

Authenticated users with page creation or edit permissions can create redirects to arbitrary external hosts, enabling phishing attacks by redirecting visitors from trusted domains to malicious sites. This compromises confidentiality and integrity but does not affect availability. No evidence of active exploitation in the wild is reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict page creation and edit permissions to trusted users only and monitor for suspicious redirect usage. Avoid relying on pages with 'redir:' prefixes for critical redirects.