Vulnerabilities

TI-2023-24979 CVE-2023-46394 · GHSA-wv72-9v4w-73w6

A stored cross-site scripting (XSS) vulnerability in /home/user/edit_submit of gougucms…

MEDIUM 58

A stored cross-site scripting (XSS) vulnerability in /home/user/edit_submit of gougucms v4.08.18 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the headimgurl parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.004 Published 2023-10-27 No fix listed CWE-79

TI-2023-24978 CVE-2023-46393 · GHSA-9gwj-43rx-hrvq

gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability…

HIGH 72

gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrarily reset users' passwords via a crafted packet.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00533 Published 2023-10-27 No fix listed CWE-460

TI-2023-02842 CVE-2023-3035 · GHSA-m3gm-9pff-f9mj

Guangdong Pythagorean OA Office System Schedule cross site scripting

LOW 25

A vulnerability has been found in Guangdong Pythagorean OA Office System up to 4.50.31 and classified as problematic.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00564 Published 2023-06-01 No fix listed CWE-79

Vulnerabilities

Filters

A stored cross-site scripting (XSS) vulnerability in /home/user/edit_submit of gougucms…

gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability…

Guangdong Pythagorean OA Office System Schedule cross site scripting