MEDIUM5.4
GHSA-pqx8-q35p-pgcv
TeamPass Stored Cross-site Scripting
Details
TeamPass 2.1.27.36 allows Stored XSS at the Search page by setting a crafted password for an item in any folder.
Are you affected?
Enter the version of the package you're using.
Affected packages
Packagist/nilsteampassnet/teampass
Introduced in:
0No fixed version published yet for nilsteampassnet/teampass (composer). Pin to a known-safe version or switch to an alternative.