GHSA-qmw8-x364-xxxmMediumCVSS 5.4

Teampass Cross-site Scripting vulnerability

Published
June 10, 2023
Last Modified
November 5, 2023

🔗 CVE IDs covered (1)

CVE-2023-3191 →

📋 Description

In versions of nilsteampassnet/teampass prior to 3.0.9 some user input was not properly sanitized which may have lead to stored cross-site scripting (XSS) vectors in the application.

🎯 Affected products1

  • composer/nilsteampassnet/teampass:< 3.0.9

🔗 References (4)