Gophish Security Vulnerabilities and Issues — Gophish CVE List

Lucene search

GetgophishGophish

3 matches found

CVE•added 2023/03/22 9:15 p.m.•58 views

CVE-2022-45004

Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted landing page.

6.1CVSS5.9AI score0.00316EPSS

CVE•added 2024/03/06 11:15 a.m.•52 views

CVE-2024-2211

Cross-Site Scripting stored vulnerability in Gophish affecting version 0.12.1. This vulnerability could allow an attacker to store a malicious JavaScript payload in the campaign menu and trigger the payload when the campaign is removed from the menu.

6.1CVSS4.4AI score0.00084EPSS

CVE•added 2020/10/28 8:15 p.m.•29 views

CVE-2020-24711

The Reset button on the Account Settings page in Gophish before 0.11.0 allows attackers to cause a denial of service via a clickjacking attack

6.5CVSS6.2AI score0.00319EPSS