CVE-2025-2366: gougucms Add Department Page add cross site scripting
A vulnerability, which was classified as problematic, was found in gougucms 4.08.18. This affects the function add of the file /admin/department/add of the component Add Department Page. The manipulation of the argument title leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-2366?
CVE-2025-2366 is classified as a problematic vulnerability.
How does CVE-2025-2366 impact the Add Department Page in Gougucms?
CVE-2025-2366 allows for cross-site scripting through manipulation of the 'title' argument on the Add Department Page.
What are the potential risks associated with CVE-2025-2366?
Exploiting CVE-2025-2366 could lead to unauthorized execution of scripts in a user's browser.
How can I mitigate the risks of CVE-2025-2366?
To mitigate CVE-2025-2366, sanitize and validate user inputs in the Add Department Page.
Is there a patch available for CVE-2025-2366 in Gougucms?
As of now, no specific patch details for CVE-2025-2366 have been provided.