CVE-2026-116100

A cross-site scripting (XSS) vulnerability exists in gougucms up to version 4.08.18 . The flaw is located in the Add function of the app/admin/controller/Level.php file within the User Level Handler component. By manipulating the Title argument, an attacker can execute a remote XSS attack. Public...