Description
TeamPass 2.1.27.36 allows Stored XSS by setting a crafted Knowledge Base label and adding any available item.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | nilsteampassnet/teampass | <= 2.1.27.36 | — | GHSA-qx37-225j-qr89 |
Medium · 5.4
CVE-2019-17204
EUVD-2022-5054GHSA-qx37-225j-qr89
TeamPass Stored Cross-site Scripting
Published Oct 5, 2019 · Updated Aug 5, 2024 · Assigned by mitre