Lucene search
K

5 matches found

Veracode
Veracode
added 2024/09/09 4:44 a.m.6 views

Cross Site Scripting(XSS)

github.com/gouniverse/cms is vulnerable to Cross Site ScriptingXSS. The vulnerability is due to improper handling of the argument alias in the PageRenderHtmlByAlias function of FrontendHandler.go. It allows an attacker to execute arbitrary scripts in the context of a user's browser...

6.1CVSS7.2AI score0.00261EPSS
Exploits0References8Affected Software1
OSV
OSV
added 2024/09/08 9:30 a.m.9 views

GHSA-PV7H-HG6M-82J8 Gouniverse GoLang CMS vulnerable to Cross-site Scripting

A vulnerability was found in Gouniverse GoLang CMS 1.4.0. It has been declared as problematic. This vulnerability affects the function PageRenderHtmlByAlias of the file FrontendHandler.go. The manipulation of the argument alias leads to cross site scripting. The attack can be initiated remotely...

5.3CVSS4.7AI score0.00261EPSS
Exploits0References10
Cvelist
Cvelist
added 2024/09/08 8:0 a.m.15 views

CVE-2024-8572 Gouniverse GoLang CMS FrontendHandler.go PageRenderHtmlByAlias cross site scripting

A vulnerability was found in Gouniverse GoLang CMS 1.4.0. It has been declared as problematic. This vulnerability affects the function PageRenderHtmlByAlias of the file FrontendHandler.go. The manipulation of the argument alias leads to cross site scripting. The attack can be initiated remotely...

5.3CVSS0.00261EPSS
Exploits0References7
Vulnrichment
Vulnrichment
added 2024/09/08 8:0 a.m.12 views

CVE-2024-8572 Gouniverse GoLang CMS FrontendHandler.go PageRenderHtmlByAlias cross site scripting

A vulnerability was found in Gouniverse GoLang CMS 1.4.0. It has been declared as problematic. This vulnerability affects the function PageRenderHtmlByAlias of the file FrontendHandler.go. The manipulation of the argument alias leads to cross site scripting. The attack can be initiated remotely...

5.3CVSS6.4AI score0.00261EPSS
Exploits0References7
CNNVD
CNNVD
added 2024/09/08 12:0 a.m.1 views

GoLang CMS 跨站脚本漏洞

GoLang CMS is a content management system of GoUniverse open source. A cross-site scripting vulnerability exists in GoLang CMS version 1.4.0, which stems from the parameter alias in the file FrontendHandler.go that can lead to cross-site scripting attacks...

6.1CVSS4.3AI score0.00261EPSS
Exploits0References8
Rows per page
Query Builder