Executive brief
Gophish vulnerable to Cross-site Scripting via crafted landing page
Affected products
- Go github.com/gophish/gophish
Junglewise Threat Intelligence
CVE-2022-45004: Gophish vulnerable to Cross-site Scripting via crafted landing page
CVE-2022-45004 · Severity: low · CVSS 3.1 · Published 2023-03-22
Technologies: github.com/gophish/gophish (Go). Vendors: Go.
Related threats
- Gophish denial of service via Office document upload in ApplyTemplate
- GO-2026-4455 - Gophish is vulnerable to Incorrect Access Control in github.com/gophish/gophish
- GO-2025-3361 - GoPhish sends cleartext passwords in github.com/gophish/gophish
- GO-2022-0987 - Gophish before 0.12.0 vulnerable to Open Redirect in github.com/gophish/gophish
- GO-2023-1982 - Gophish vulnerable to Server-Side Request Forgery in github.com/gophish/gophish