Approved changes feed: RSS · Atom

cpe:2.3:a:getgophish:gophish:0.12.1:*:*:*:*:*:*:*

part: a version: 0.12.1 update: *

VendorGetgophish (c5429e6e-e17e-57df-a2d1-d9335e9bb08c)
ProductGophish (4968fd07-e96c-5a74-8813-f26749d95ead)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:docker/gophish/gophish purl2cpe 2026-06-01 10:16:29.570791
pkg:github/gophish/gophish purl2cpe 2026-06-01 10:16:29.570793
pkg:sourceforge/gophish.mirror purl2cpe 2026-06-01 10:16:29.570794

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2024-2211 vulnerable 2026-06-08 06:33:30.625029 Cross-Site Scripting vulnerability in Gophish Admin Panel
MEDIUM (4.6)
Cross-Site Scripting stored vulnerability in Gophish affecting version 0.12.1. This vulnerability could allow an attacker to store a malicious JavaScript payload in the campaign menu and trigger the payload when the campaign is removed from the menu.
Published: 2024-03-06T10:47:03.845Z
Updated: 2024-08-01T19:03:39.398Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.