Approved changes feed: RSS · Atom

cpe:2.3:a:gougucms:gougucms:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorGougucms (229ff258-9f40-5e49-bf24-ab720b412ea3)
ProductGougucms (d49088ae-fda2-5bbb-8463-bb00e072b837)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2026-5249 vulnerable 2026-06-08 08:07:03.448919 gougucms Record Endpoint record.html cross site scripting
LOW (3.5)
A vulnerability was found in gougucms 4.08.18. This impacts an unknown function of the file \gougucms-master\app\admin\view\user\record.html of the component Record Endpoint. Performing a manipulation of the argument value.content results in cross site scripting. It is possible to initiate the attack remotely. The exploit has been made public and could be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-04-01T01:30:16.723Z
Updated: 2026-04-03T16:37:46.875Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2026-5248 vulnerable 2026-06-08 08:07:03.448416 gougucms User Registration Login.php reg_submit dynamically-determined object attributes
MEDIUM (6.3)
A vulnerability has been found in gougucms 4.08.18. This affects the function reg_submit of the file gougucms-master\app\home\controller\Login.php of the component User Registration Handler. Such manipulation of the argument level leads to dynamically-determined object attributes. The attack may be performed from remote. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Published: 2026-04-01T00:45:12.460Z
Updated: 2026-04-01T12:14:32.764Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.