Where
-Infinity
0

Trending

Last week
Last month
Last year

Getgophish GophishGophish through 0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted payload inv…

Risk 43
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Gophish through 0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted payload involving autofocus.

First published (updated )
CVE-2022-45003

Getgophish GophishXSS

Risk 38
Severity
6.1
XSS
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted landing page.

First published (updated )
CVE-2022-45004

Gophish GophishCross-Site Scripting vulnerability in Gophish Admin Panel

Risk 38
Severity
6.1
XSS
AV:N/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:N

Cross-Site Scripting stored vulnerability in Gophish affecting version 0.12.1. This vulnerability could allow an attacker to store a malicious JavaScript payload in the campaign menu and trigger the payload when the campaign is removed from the menu.

Remedy

There is no reported solution at this time.
First published (updated )
CVE-2024-2211

go/github.com/gophish/gophishXSS

Risk 30
Severity
4.8
XSS
AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Gophish through 0.8.0 allows XSS via a username.

First published (updated )
CVE-2019-16146

Getgophish GophishThe Reset button on the Account Settings page in Gophish before 0.11.0 allows attackers to cause a d…

Risk 37
Severity
6.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H

The Reset button on the Account Settings page in Gophish before 0.11.0 allows attackers to cause a denial of service via a clickjacking attack

First published (updated )
CVE-2020-24711

Getgophish GophishGophish through 0.10.1 does not invalidate the gophish cookie upon logout.

Risk 43
Severity
7.5
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Gophish through 0.10.1 does not invalidate the gophish cookie upon logout.

First published (updated )
CVE-2020-24713

Getgophish GophishGophish before 0.11.0 allows the creation of CSV sheets that contain malicious content.

Risk 79
Severity
9.3
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Gophish before 0.11.0 allows the creation of CSV sheets that contain malicious content.

First published (updated )
CVE-2020-24707

Getgophish GophishXSS

Risk 34
Severity
5.4
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the IMAP Host field on the account settings page.

First published (updated )
CVE-2020-24712

Getgophish GophishXSS

Risk 34
Severity
5.4
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Cross Site Scripting (XSS) vulnerability in Gophish through 0.10.1 via a crafted landing page or email template.

First published (updated )
CVE-2020-24709

Getgophish GophishXSS

Risk 34
Severity
5.4
XSS
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the Host field on the send profile form.

First published (updated )
CVE-2020-24708

go/github.com/gophish/gophishSSRF

Risk 27
Severity
5.3
SSRF
AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Gophish before 0.11.0 allows SSRF attacks.

First published (updated )
CVE-2020-24710

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co
By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.
© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203