CVE-2020-24712

Cross Site Scripting XSS vulnerability in Gophish before 0.11.0 via the IMAP Host field on the account settings page...

CVE-2020-24712

Gophish before 0.11.0 contains a Cross Site Scripting (XSS) vulnerability exploitable via the IMAP Host field on the account settings page. The issue is documented across multiple feeds (NVD, Red Hat, CNVD, OSV, CVE listing) with consistent description: XSS in versions prior to 0.11.0. The known ...