Skip to content
OpenAdvisories

Vendor

PasswordPusher

1 known vulnerabilities.

Products

PasswordPusher 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.2
    CVE-2026-59802

    PasswordPusher < 2.8.1 - Redirect-Based XSS via data URI in URL Push Payload

    PasswordPusher before 2.8.1 accepts data URI schemes in URL push payloads due to insufficient validation in the valid_url function. Attackers can create malicious pushes containing data:text/html URIs that execute arbitrary JavaScript in victims' browsers whe…

    PasswordPusher PasswordPusher