GHSA-h5g9-2p35-54c7MediumCVSS 5.4
nilsteampassnet/teampass vulnerable to cross-site scripting
🔗 CVE IDs covered (1)
📋 Description
Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.9. This enables an attacker to inject malicious code into a shared folder, which can then be executed by other users who have access to the folder.
🎯 Affected products1
- composer/nilsteampassnet/teampass:< 3.0.9