Cross-site Scripting (XSS)

nilsteampassnet/teampass is susceptible to cross-site scripting XSS attacks. The attack can be launched by injecting malicious code via /sources/folders.queries.php...

CVE-2017-15278

Cross-Site Scripting XSS was discovered in TeamPass before 2.1.27.9. The vulnerability exists due to insufficient filtration of data in /sources/folders.queries.php. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website...

CVE-2017-15278: Improper Neutralization of Input During Web Page Generation

Cross-Site Scripting XSS was discovered in TeamPass before 2.1.27.9. The vulnerability exists due to insufficient filtration of data in /sources/folders.queries.php. An attacker could execute arbitrary HTML and script code in a browser in the context of the vulnerable website...

PT-2017-13963

Name of the Vulnerable Software and Affected Versions TeamPass versions prior to 2.1.27.9 Description A Cross-Site Scripting XSS issue was found due to insufficient data filtration in the /sources/folders.queries.php file. This allows an attacker to execute arbitrary HTML and script code in a...