CVE-2022-45004

Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted landing page.

Score

CVSS 3.1 6.1 Medium

Status

Modified - cve@mitre.org

Published

2023-03-22

Last modified

2025-02-26

Weaknesses

CWE-79

Affected products

• Gophish (Getgophish)

References

• https://github.com/gophish/gophish/releases/tag/v0.12.1
• https://pastebin.com/z5MD3z8c