← Back

Gougucms

gougucms

3 CVEs • 2 products

Products (2)

Click to collapse
Toggle
Gougucms
gougucms
2 CVEs
Pythagorean Oa Office System
pythagorean_oa_office_system
1 CVE

CVEs (3)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2023-46394
1Gougucms
1Gougucms
Jun 17, 2026
Oct 27, 2023
N/A· v4
5.4 MEDIUM· v3
N/A· v2
A stored cross-site scripting (XSS) vulnerability in /home/user/edit_submit of gougucms v4.08.18 allows attackers to execute arbitrary web scripts or HTML via injecting a crafted payload into the headimgurl parameter.
CVE-2023-46393
1Gougucms
1Gougucms
Jun 17, 2026
Oct 27, 2023
N/A· v4
7.5 HIGH· v3
N/A· v2
gougucms v4.08.18 was discovered to contain a password reset poisoning vulnerability which allows attackers to arbitrarily reset users' passwords via a crafted packet.
CVE-2023-3035
1Gougucms
1Pythagorean Oa Office System
Jun 17, 2026
Jun 1, 2023
N/A· v4
5.4 MEDIUM· v3
4.0 MEDIUM· v2
A vulnerability has been found in Guangdong Pythagorean OA Office System up to 4.50.31 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Schedule Handler. The mani...Show more
A vulnerability has been found in Guangdong Pythagorean OA Office System up to 4.50.31 and classified as problematic. Affected by this vulnerability is an unknown functionality of the component Schedule Handler. The manipulation of the argument description leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-230467.Show less