MEDIUM🇵🇱 Wersja polska

CVE-2023-46394

CVSS 5.4v3.1pub. 2023-10-27upd. 2024-11-21

A stored cross-site scripting (XSS) vulnerability in /home/user/edit_submit of gougucms v4.08.18 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the headimgurl parameter.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

  • Gougucms

    APP
    Gougucms
    4.08.18
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
XSS
CWE
References

Related vulnerabilities

CVE-2023-46393HIGH7.5ten sam produkt

gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to...

CVE-2023-3035LOW3.5ten sam vendor

A vulnerability has been found in Guangdong Pythagorean OA Office System up to 4.50.31 and classified as probl...