Approved changes feed: RSS · Atom

cpe:2.3:a:gouniverse:golang_cms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGouniverse (aaa49f2f-c9a5-5012-92ff-517f9bc5ae91)
ProductGolang Cms (30e34359-494b-5db0-88cd-ac2c6ec1222c)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from purl2cpe mapping

PURL mappings

PURLSourceLast updated
pkg:github/gouniverse/cms purl2cpe 2026-06-01 10:16:19.551932
pkg:golang/github.com/gouniverse/cms purl2cpe 2026-06-01 10:16:19.551934

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-8572 vulnerable 2026-06-08 07:00:24.971470 Gouniverse GoLang CMS FrontendHandler.go PageRenderHtmlByAlias cross site scripting
LOW (3.5)
A vulnerability was found in Gouniverse GoLang CMS 1.4.0. It has been declared as problematic. This vulnerability affects the function PageRenderHtmlByAlias of the file FrontendHandler.go. The manipulation of the argument alias leads to cross site scripting. The attack can be initiated remotely. Upgrading to version 1.4.1 is able to address this issue. The patch is identified as 3e661cdfb4beeb9fe2ad507cdb8104c0b17d072c. It is recommended to upgrade the affected component.
Published: 2024-09-08T08:00:05.183Z
Updated: 2024-09-10T14:17:01.889Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.