Filtered by vendor Getgophish Subscriptions
Filtered by product Gophish Subscriptions
Total 12 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2022-45004 1 Getgophish 1 Gophish 2025-02-26 6.1 Medium
Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted landing page.
CVE-2024-2211 1 Getgophish 1 Gophish 2025-02-26 4.6 Medium
Cross-Site Scripting stored vulnerability in Gophish affecting version 0.12.1. This vulnerability could allow an attacker to store a malicious JavaScript payload in the campaign menu and trigger the payload when the campaign is removed from the menu.
CVE-2022-45003 1 Getgophish 1 Gophish 2025-02-26 7.5 High
Gophish through 0.12.1 allows attackers to cause a Denial of Service (DoS) via a crafted payload involving autofocus.
CVE-2022-25295 1 Getgophish 1 Gophish 2024-11-21 5.4 Medium
This affects the package github.com/gophish/gophish before 0.12.0. The Open Redirect vulnerability exists in the next query parameter. The application uses url.Parse(r.FormValue("next")) to extract path and eventually redirect user to a relative URL, but if next parameter starts with multiple backslashes like \\\\\\example.com, browser will redirect user to http://example.com.
CVE-2020-24713 1 Getgophish 1 Gophish 2024-11-21 7.5 High
Gophish through 0.10.1 does not invalidate the gophish cookie upon logout.
CVE-2020-24712 1 Getgophish 1 Gophish 2024-11-21 5.4 Medium
Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the IMAP Host field on the account settings page.
CVE-2020-24711 1 Getgophish 1 Gophish 2024-11-21 6.5 Medium
The Reset button on the Account Settings page in Gophish before 0.11.0 allows attackers to cause a denial of service via a clickjacking attack
CVE-2020-24710 1 Getgophish 1 Gophish 2024-11-21 5.3 Medium
Gophish before 0.11.0 allows SSRF attacks.
CVE-2020-24709 1 Getgophish 1 Gophish 2024-11-21 5.4 Medium
Cross Site Scripting (XSS) vulnerability in Gophish through 0.10.1 via a crafted landing page or email template.
CVE-2020-24708 1 Getgophish 1 Gophish 2024-11-21 5.4 Medium
Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the Host field on the send profile form.
CVE-2020-24707 1 Getgophish 1 Gophish 2024-11-21 7.8 High
Gophish before 0.11.0 allows the creation of CSV sheets that contain malicious content.
CVE-2019-16146 1 Getgophish 1 Gophish 2024-11-21 4.8 Medium
Gophish through 0.8.0 allows XSS via a username.