PT-2024-39109 · Unknown · Gouniverse Golang Cms

Zihe

·

CVE-2024-8572

·

Published

2024-09-08

·

Updated

2024-09-13

CVSS v4.0

5.3

Medium

VectorAV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
Name of the Vulnerable Software and Affected Versions: Gouniverse GoLang CMS version 1.4.0
Description: A vulnerability was found in Gouniverse GoLang CMS, affecting the function PageRenderHtmlByAlias of the file FrontendHandler.go. The manipulation of the argument alias leads to cross-site scripting. The attack can be initiated remotely.
Recommendations: For Gouniverse GoLang CMS version 1.4.0, upgrade to version 1.4.1 to address this issue. As a temporary workaround, consider restricting the use of the PageRenderHtmlByAlias function until the patch is applied.

Exploit

Fix

XSS

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2024-8572
GHSA-PV7H-HG6M-82J8
GO-2024-3125

Affected Products

Gouniverse Golang Cms