CVE-2026-5249

Gougucms 4.08.18 is affected by a cross-site scripting (XSS) flaw in the Record Endpoint, specifically in the file gougucms-master/app/admin/view/user/record.html. The vulnerability arises when an attacker manipulates the value.content argument, enabling remote exploitation. Public exploit exists...