CVE-2020-24708

Cross Site Scripting XSS vulnerability in Gophish before 0.11.0 via the Host field on the send profile form...

CVE-2020-24708

Gophish is affected by a Cross-Site Scripting (XSS) vulnerability (CVE-2020-24708) in versions prior to 0.11.0, exploitable via the Host field on the send profile form. Root cause: improper handling of input in the Host field leading to script injection. Impact: potential script execution in the ...