CVE-2026-116100

A cross-site scripting (XSS) vulnerability exists in gougucms up to version 4.08.18 . The flaw is located in the Add function of the app/admin/controller/Level.php file within the User Level Handler component. By manipulating the Title argument, an attacker can execute a remote XSS attack. Public...

EUVD-2026-109585

A vulnerability has been found in gougucms up to 4.08.18. Impacted is the function Add of the file app/admin/controller/Level.php of the component User Level Handler. The manipulation of the argument Title leads to cross site scripting. The attack is possible to be carried out remotely. The explo...