EPSS
Percentile
30.0%
Teampass 2.1.26 allows reflected XSS via the index.php PATH_INFO. Someone must open a link for the Teampass Password Manager index page containing malicious payload.
gist.github.com/RNPG/6919286e0daebce7634d0a744e060dca
github.com/nilsteampassnet/TeamPass/commits/teampass_2
nvd.nist.gov/vuln/detail/CVE-2022-26980