Gophish

2 CVEs across 2 Gophish products. Browse Gophish vulnerabilities, severities, and proof-of-concept exploits.

Gophish products with known CVEs

ProductCVEs
Admin Panel1
Gophish1
Gophish CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-39904Medium6.52026-06-22Gophish through 0.12.1 contains a denial of service vulnerability that allows authenticated users with the User role to exhaust server memory by uploading a cr…
CVE-2024-2211Medium4.62024-03-06Cross-Site Scripting stored vulnerability in Gophish affecting version 0.12.1. This vulnerability could allow an attacker to store a malicious JavaScript paylo…