Gougucms

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

Gougucms records in CISA KEV

No Gougucms vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Gougucms 2 records HIGH Pythagorean Oa Office System 1 record LOW

Records

3 records

TI-2023-24978 CVE-2023-46393 · GHSA-9gwj-43rx-hrvq

gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability…

HIGH 72

gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrarily reset users' passwords via a crafted packet.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00533 Published 2023-10-27 No fix listed CWE-460

TI-2023-24979 CVE-2023-46394 · GHSA-wv72-9v4w-73w6

A stored cross-site scripting (XSS) vulnerability in /home/user/edit_submit of gougucms…

MEDIUM 58

A stored cross-site scripting (XSS) vulnerability in /home/user/edit_submit of gougucms v4.08.18 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the headimgurl parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.004 Published 2023-10-27 No fix listed CWE-79

TI-2023-02842 CVE-2023-3035 · GHSA-m3gm-9pff-f9mj

Guangdong Pythagorean OA Office System Schedule cross site scripting

LOW 25

A vulnerability has been found in Guangdong Pythagorean OA Office System up to 4.50.31 and classified as problematic.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00564 Published 2023-06-01 No fix listed CWE-79

Open these records in search →

Critical	0
High	1
Medium	2
Low	0
No CVSS	0