medium5.4
CVE-2020-24708
Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the Host field on the send profile form.
Impact
Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the Host field on the send profile form.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Getgophish | Gophish | before 0.11.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/gophish/gophish/commit/90fed5a575628b89eaf941e1627b49e0f3693812
- https://herolab.usd.de/security-advisories/usd-2020-0048/
- https://github.com/gophish/gophish/commit/90fed5a575628b89eaf941e1627b49e0f3693812
- https://herolab.usd.de/security-advisories/usd-2020-0048/