CVE-2023-46394

A stored cross-site scripting XSS vulnerability in /home/user/editsubmit of gougucms v4.08.18 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the headimgurl parameter...

CVE-2023-46393

Summary: Gougucms v4.08.18 contains a password reset poisoning vulnerability that lets an attacker arbitrarily reset user passwords via a crafted packet. This affects gougucms CMS version 4.08.18. The underlying issue is a mismanaged password-reset flow (password reset poisoning). Impact as per s...