EPSS
Percentile
30.0%
nilsteampassnet/teampass is vulnerable to reflected cross-site scripting. The vulnerability exists in index.php due to improper sanitization which allows an attacker to inject and execute arbitrary scripts.
index.php
gist.github.com/RNPG/6919286e0daebce7634d0a744e060dca
github.com/advisories/GHSA-m2wv-m5pf-284r
github.com/nilsteampassnet/TeamPass/commit/3ebe8ce354ffd20c9aa93f3d92a1f76d7e8618a0
github.com/nilsteampassnet/TeamPass/commits/teampass_2
github.com/nilsteampassnet/TeamPass/issues/2642