Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted landing page.
References:GSA_kwCzR0hTQS01NW05LWhtOTIteG04as4AAyPG
Gophish vulnerable to Cross-site Scripting via crafted landing page
| Affected Packages | Affected Versions | Fixed Versions | |
|---|---|---|---|
|
go:github.com/gophish/gophish
PURL:
pkg:go/github.com%2Fgophish%2Fgophish
|
<= 0.12.1 | No known fixed version | |
Affected Version RangesAll affected versionsv0.1.1, v0.1.2, v0.2.0, v0.3.0, v0.4.0, v0.5.0, v0.6.0, v0.7.0, v0.8.0, v0.9.0, v0.10.0, v0.10.1, v0.11.0, v0.12.0, v0.12.1 |
|||