| Package | Affected versions | Patched versions |
|---|---|---|
| nilsteampassnet/teampass | ≤ 2.1.27.36 | |
| teampass | = 2.1.27.36 |
TeamPass 2.1.27.36 allows XSS by setting a crafted password for an item in a folder, and then sharing that item with an admin. (The crafted password is exploitable when viewing the change history, or the previous used password field.)
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free