← All advisories

Medium severity4.8NVD Advisory· Published Sep 9, 2019· Updated Jun 17, 2026

CVE-2019-16146

CVE-2019-16146

Description

Gophish through 0.8.0 allows XSS via a username.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
github.com/gophish/gophishGo	< 0.9.0	0.9.0

Affected products

3

Getgophish/Gophish
cpe:2.3:a:getgophish:gophish:*:*:*:*:*:*:*:*
Range: <=0.8.0
Gophish/Gophishdescription
ghsa-coords
pkg:golang/github.com/gophish/gophish
Range: < 0.9.0

Patches

Vulnerability mechanics

References

4

github.com/gophish/gophish/pull/1547nvdPatchThird Party AdvisoryWEB
github.com/advisories/GHSA-9h9f-9q8g-6764ghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2019-16146ghsaADVISORY
github.com/gophish/gophish/commit/24fe998a3aa04e205900476a9601d481e94d8eeaghsaWEB

News mentions

0

No linked articles in our index yet.