Gougucms Cross-Site Scripting Vulnerability in Add Department Page

A cross-site scripting (XSS) vulnerability has been identified in Gougucms version 4.08.18. The issue arises in the Add Department Page, specifically within the /admin/department/add route. The vulnerability allows remote attackers to inject arbitrary JavaScript or HTML into the title parameter, which could then be executed when the injected content is rendered.

Impact

Exploitation of this vulnerability allows for stored cross-site scripting, where injected scripts are executed in the context of the user viewing the affected page.