CVE-2026-5249

Name of the Vulnerable Software and Affected Versions gougucms version 4.08.18

Description A cross-site scripting issue exists in gougucms 4.08.18. The issue is located in an unknown function of the file gougucms-masterappadminviewuserrecord.html within the Record Endpoint component. Manipulation of the value.content argument can lead to cross-site scripting. The attack can be initiated remotely, and the exploit has been publicly released. The vendor was contacted but did not respond.

Recommendations For gougucms version 4.08.18, address the cross-site scripting issue by sanitizing the value.content argument in the gougucms-masterappadminviewuserrecord.html file of the Record Endpoint component.