CVE-2015-7562 TeamPass vulnerable to Cross-site Scripting
MediumCVSS 6.1
EPSS 1.8%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Multiple cross-site scripting (XSS) vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) label value of an item or (2) name of a role.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| nilsteampassnet/teampass(Packagist) | < 2.1.25 | 2.1.25 |
| nilsteampassnet/teampass(Packagist) | = 2.1.21 | No fix listed |
| teampass | <= 2.1.24 | No fix listed |
References
- nvd.nist.gov third-party-advisory vendor-advisory
- github.com patch
- github.com product
- 39559 exploit patch third-party-advisory
- github.com