Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:21466
HistorySep 10, 2019 - 3:58 a.m.

Cross-Site Scripting (XSS)

2019-09-1003:58:41
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
10

EPSS

0.001

Percentile

22.7%

github.com/gophish/gophish is vulnerable to cross-site scripting (XSS). The attack is possible because there are many unsanitized user.username values in users.js, allowing an attacker to inject malicious script via those parameters in User Management Page.

EPSS

0.001

Percentile

22.7%

Related for VERACODE:21466