Advisories · Technology

gougucms.

Every CVE that names gougucms among its affected products, newest first. Vendors and products are as the CNA wrote them; check the affected versions on each record.

CVE-2026-116100 CVE record

CVSS 4.8 Medium

gougucms User Level Level.php add cross site scripting
- gougucms
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 26 Oct 2026
CVE-2026-5249 CVE record

CVSS 5.1 Medium

gougucms Record Endpoint record.html cross site scripting
- gougucms
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 1 Apr 2026
CVE-2026-5248 CVE record

CVSS 5.3 Medium

gougucms User Registration Login.php reg_submit dynamically-determined object attributes
- gougucms
- Broken access control
- CWE-913
Not analysed yet 1 Apr 2026
CVE-2025-2366 CVE record

CVSS 4.8 Medium

gougucms Add Department Page add cross site scripting
- gougucms
- Cross-site scripting (XSS)
- Code injection
Not analysed yet 17 Mar 2025