CVE-2023-46394

A stored cross-site scripting (XSS) vulnerability in /home/user/edit_submit of gougucms v4.08.18 allows attackers to execute arbitrary web scripts or HTML via…

published October 27, 2023

CVSS
—
EPSS
0%
Percentile
26.9
In the wild
Unconfirmed
What it is

A stored cross-site scripting (XSS) vulnerability in /home/user/edit_submit of gougucms v4.08.18 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the headimgurl parameter.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00346 · 26.9th percentile
Published
2023-10-27T00:00Z
EPSS history
Timeline
  • 27 OCT 00:00Z
    A stored cross-site scripting (XSS) vulnerability in /home/user/edit_submit of gougucms v4.08.18 allows attackers to execute arbitrary web scripts or HTML via…
    cvelistv5