Unrated
Cross Site Scripting (XSS) vulnerability in Gophish before 0.11.0 via the Host field on the send profile form.
CVE-2020-24708
First seen on SecPulse
References
- patch github.com
- report herolab.usd.de