Skip to content
Getgophish vulnerabilities
Newest
-
getgophish gophish
Gophish is vulnerable to Incorrect Access Control
CVE-2025-70963
7.6 High
-
getgophish gophish, gophish admin panel +1 more
Cross-Site Scripting vulnerability in Gophish Admin Panel
CVE-2024-2211
4.6 Medium
-
getgophish gophish
Gophish vulnerable to Cross-site Scripting via crafted landing page
CVE-2022-45004
Public exploit
6.1 Medium
-
getgophish gophish
Gophish vulnerable to Denial of Service via crafted payload involving autofocus
CVE-2022-45003
Public exploit
7.5 High
-
getgophish gophish
Open Redirect
CVE-2022-25295
Fix available
5.4 Medium
-
getgophish gophish
Gophish before 0.11.0 allows the creation of CSV sheets that contain malicious content.
CVE-2020-24707
7.8 High
-
getgophish gophish
Gophish through 0.10.1 does not invalidate the gophish cookie upon logout.
CVE-2020-24713
7.5 High
-
getgophish gophish
The Reset button on the Account Settings page in Gophish before 0.11.0 allows attackers to cause a denial of service via a clickjacking attack
CVE-2020-24711
6.5 Medium
-
getgophish gophish
Gophish vulnerable to Server-Side Request Forgery
CVE-2020-24710
Fix available
5.3 Medium
-
getgophish gophish
Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the IMAP Host field on the account settings page.
CVE-2020-24712
5.4 Medium
-
getgophish gophish
Cross Site Scripting (XSS) vulnerability in Gophish through 0.10.1 via a crafted landing page or email template.
CVE-2020-24709
5.4 Medium
-
getgophish gophish
Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the Host field on the send profile form.
CVE-2020-24708
5.4 Medium
-
getgophish gophish
Gophish XSS Vulnerability
CVE-2019-16146
Fix available
4.8 Medium