CVE-2024-2211

Cross-Site Scripting stored vulnerability in Gophish Admin Panel (version 0.12.1) allows storing a malicious JavaScript payload in the campaign menu and triggering it when the campaign is removed from the menu. Affected: Gophish; root cause: stored XSS in the campaign menu; impact: potential for ...

Gophish Cross-Site Scripting Vulnerability

Gophish is an open source phishing framework. A cross-site scripting vulnerability exists in Gophish version 0.12.1, which stems from the presence of a stored cross-site scripting XSS vulnerability...

Denial Of Services (DoS)

github.com/gophish/gophish is vulnerable to Denial Of Services DoS. An attacker can cause an application crash through a crafted payload involving autofocus...

Cross-Site Scripting (XSS)

github.com/gophish/gophish is vulnerable to Cross-Site Scripting XSS attacks. The library does not properly escape the user input before it output to the front end, allowing an attacker to inject and execute malicious JavaScript on victim's browser via a crafted landing page...

GHSA-55M9-HM92-XM8J Gophish vulnerable to Cross-site Scripting via crafted landing page

Gophish through 0.12.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted landing page...

Gophish vulnerable to Cross-site Scripting via crafted landing page

Gophish through 0.12.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted landing page...

Gophish vulnerable to Denial of Service via crafted payload involving autofocus

Gophish through 0.12.1 allows attackers to cause a Denial of Service DoS via a crafted payload involving autofocus...

GHSA-8GG8-WR4J-V2WR Gophish vulnerable to Denial of Service via crafted payload involving autofocus

Gophish through 0.12.1 allows attackers to cause a Denial of Service DoS via a crafted payload involving autofocus...

CVE-2022-45004

Gophish through 0.12.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted landing page...

CVE-2022-45003

Gophish through 0.12.1 allows attackers to cause a Denial of Service DoS via a crafted payload involving autofocus...

Design/Logic Flaw

Gophish through 0.12.1 allows attackers to cause a Denial of Service DoS via a crafted payload involving autofocus...

Cross site scripting

Gophish through 0.12.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted landing page...

PT-2023-14573 · Gophish · Gophish

Name of the Vulnerable Software and Affected Versions: Gophish versions through 0.12.1 Description: The issue allows attackers to cause a Denial of Service DoS via a crafted payload involving autofocus. Recommendations: For versions through 0.12.1, update to a version later than 0.12.1 to resolve...

CVE-2022-45004

Gophish through 0.12.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted landing page...

CVE-2022-45004

Gophish through 0.12.1 was discovered to contain a cross-site scripting XSS vulnerability via a crafted landing page...

CVE-2022-45004

CVE-2022-45004 affects Gophish up to version 0.12.1. An XSS vulnerability exists on the landing/login page due to improper escaping of user input, allowing injection of malicious JavaScript in the victim’s browser. Documented impacts include a Medium severity (CVSS v3.1: 6.1) with network attack ...

Gophish 安全漏洞

Gophish is an open source phishing framework. A security vulnerability exists in Gophish version 0.12.1, which can be exploited by an attacker to cause a denial of service DoS via a crafted payload...

CVE-2022-45003

Gophish through 0.12.1 allows attackers to cause a Denial of Service DoS via a crafted payload involving autofocus...

Gophish 跨站脚本漏洞

Gophish is an open source phishing framework. A security vulnerability exists in Gophish version 0.12.1, which stems from the login page containing a cross-site scripting vulnerability...

CVE-2022-45003

CVE-2022-45003 affects the phishing framework Gophish (version up to 0.12.1) and is a DoS resulting from a crafted payload involving autofocus. The available documents confirm the affected software and the underlying impact (application crash/DoS) but do not provide explicit exploitation details,...