CVE-2024-8572

Gouniverse GoLang CMS 1.4.0 contains a Cross-Site Scripting (XSS) vulnerability in PageRenderHtmlByAlias (FrontendHandler.go). The vulnerability arises from manipulation of the alias argument and can be exploited remotely. A fix is available in version 1.4.1, with the patch identified as 3e661cdf...