CVE-2017-15278

Cross-Site Scripting XSS was discovered in TeamPass before 2.1.27.9. The vulnerability exists due to insufficient filtration of data in /sources/folders.queries.php. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website...

CVE-2017-15278

CVE-2017-15278 affects TeamPass versions prior to 2.1.27.9. The vulnerability is a cross-site scripting (XSS) issue caused by insufficient filtration of data in the code path /sources/folders.queries.php, allowing an attacker to inject arbitrary HTML/script in a user’s browser when visiting the v...