CVE-2026-116100 | gougucms up to 4.08.18 User Level Level.php add title cross site scripting

October 25, 2026 Yanac

A vulnerability was found in gougucms up to 4.08.18. It has been rated as problematic. Impacted is the function Add of the file app/admin/controller/Level.php of the component User Level Handler. The manipulation of the argument Title leads to cross site scripting.

This vulnerability is uniquely identified as CVE-2026-116100. The attack is possible to be carried out remotely. Moreover, an exploit is present.

The vendor was contacted early about this disclosure but did not respond in any way.VulDB Recent EntriesRead More