CVE-2020-24708

Cross Site Scripting XSS vulnerability in Gophish before 0.11.0 via the Host field on the send profile form...

Cross site scripting

Cross Site Scripting XSS vulnerability in Gophish before 0.11.0 via the Host field on the send profile form...

CVE-2020-24708

Cross Site Scripting XSS vulnerability in Gophish before 0.11.0 via the Host field on the send profile form...

CVE-2020-24708: Improper Neutralization of Input During Web Page Generation

Cross Site Scripting XSS vulnerability in Gophish before 0.11.0 via the Host field on the send profile form...

PT-2020-15819

Name of the Vulnerable Software and Affected Versions Gophish versions prior to 0.11.0 Description The issue is related to a Cross Site Scripting XSS vulnerability. It occurs via the Host field on the send profile form. Recommendations For versions prior to 0.11.0, update to version 0.11.0 or lat...