CVE-2022-45004 - Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted landing page

MEDIUM

Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted landing page

Published Mar 22, 2023

6.1

MEDIUM

CVSS 3.1

EPSS 0.60%

Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted landing page.

Ecosystem	Package	Introduced	Fixed
Go	github.com/gophish/gophish	0	not fixed

No remediation recorded yet.

Weaknesses (1)

CWE-79

Cross-site Scripting (XSS)

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2023-0875		Advisory
https://github.com/advisories/GHSA-55m9-hm92-xm8j		Advisory
https://github.com/gophish/gophish/releases/tag/v0.12.1		Release Notes
https://nvd.nist.gov/vuln/detail/CVE-2022-45004
https://pastebin.com/z5MD3z8c		Exploit