Skip to contentGetgophish Gophish vulnerabilities
- getgophish gophishGophish is vulnerable to Incorrect Access ControlCVE-2025-709637.6 High
- getgophish gophish, gophish admin panel +1 moreCross-Site Scripting vulnerability in Gophish Admin PanelCVE-2024-22114.6 Medium
- getgophish gophishGophish vulnerable to Cross-site Scripting via crafted landing pageCVE-2022-45004Public exploit6.1 Medium
- getgophish gophishGophish vulnerable to Denial of Service via crafted payload involving autofocusCVE-2022-45003Public exploit7.5 High
- getgophish gophishOpen RedirectCVE-2022-25295Fix available5.4 Medium
- getgophish gophishGophish before 0.11.0 allows the creation of CSV sheets that contain malicious content.CVE-2020-247077.8 High
- getgophish gophishGophish through 0.10.1 does not invalidate the gophish cookie upon logout.CVE-2020-247137.5 High
- getgophish gophishThe Reset button on the Account Settings page in Gophish before 0.11.0 allows attackers to cause a denial of service via a clickjacking attackCVE-2020-247116.5 Medium
- getgophish gophishGophish vulnerable to Server-Side Request ForgeryCVE-2020-24710Fix available5.3 Medium
- getgophish gophishCross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the IMAP Host field on the account settings page.CVE-2020-247125.4 Medium
- getgophish gophishCross Site Scripting (XSS) vulnerability in Gophish through 0.10.1 via a crafted landing page or email template.CVE-2020-247095.4 Medium
- getgophish gophishCross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the Host field on the send profile form.CVE-2020-247085.4 Medium
- getgophish gophishGophish XSS VulnerabilityCVE-2019-16146Fix available4.8 Medium