CVE-2020-24707

Gophish before 0.11.0 allows the creation of CSV sheets that contain malicious content...

CVE-2020-24707

Gophish (before 0.11.0) is affected by a CSV injection vulnerability: it allows creation of CSV sheets containing malicious content. The issue is documented across multiple sources, with remediation to upgrade to v0.11.0 (see references to v0.11.0 release).