medium6.1
CVE-2022-45004
Gophish vulnerable to Cross-site Scripting via crafted landing page
Impact
Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted landing page.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/gophish/gophish | <= 0.12.1 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Getgophish | Gophish | through 0.12.1 |