← All advisories

Medium severity6.1NVD Advisory· Published Mar 22, 2023· Updated Jun 17, 2026

CVE-2022-45004

CVE-2022-45004

Description

Gophish through 0.12.1 was discovered to contain a cross-site scripting (XSS) vulnerability via a crafted landing page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected packages

Versions sourced from the GitHub Security Advisory.

Package	Affected versions	Patched versions
github.com/gophish/gophishGo	<= 0.12.1	—

Affected products

3

Getgophish/Gophish
cpe:2.3:a:getgophish:gophish:*:*:*:*:*:*:*:*
Range: <=0.12.1
Gophish/Gophishcpe-rescue
ghsa-coords
pkg:golang/github.com/gophish/gophish
Range: <= 0.12.1

Patches

Vulnerability mechanics

References

4

pastebin.com/z5MD3z8cnvdExploitWEB
github.com/advisories/GHSA-55m9-hm92-xm8jghsaADVISORY
nvd.nist.gov/vuln/detail/CVE-2022-45004ghsaADVISORY
github.com/gophish/gophish/releases/tag/v0.12.1nvdRelease NotesWEB

News mentions

0

No linked articles in our index yet.