Vulnerability CVE-2023-46394


Published: 2023-10-27

Description:
A stored cross-site scripting (XSS) vulnerability in /home/user/edit_submit of gougucms v4.08.18 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the headimgurl parameter.

 References:
https://gitee.com/gouguopen/gougucms/issues/I88TC0

Copyright 2026, cxsecurity.com

 

Back to Top