Description
An issue was discovered in TeamPass 2.1.27.35. From the sources/items.queries.php "Import items" feature, it is possible to load a crafted CSV file with an XSS payload.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | nilsteampassnet/teampass | <= 2.1.27.35 | — | GHSA-m3pp-jcpm-2vr9 |