medium5.4
CVE-2020-24712
Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the IMAP Host field on the account settings page.
Impact
Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the IMAP Host field on the account settings page.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Getgophish | Gophish | before 0.11.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/gophish/gophish/commit/4e9b94b641755f359542b246cc0c555fa3bc6715
- https://github.com/gophish/gophish/releases/tag/v0.11.0
- https://herolab.usd.de/security-advisories/usd-2020-0050/
- https://github.com/gophish/gophish/commit/4e9b94b641755f359542b246cc0c555fa3bc6715
- https://github.com/gophish/gophish/releases/tag/v0.11.0
- https://herolab.usd.de/security-advisories/usd-2020-0050/