| Package | Affected versions | Patched versions |
|---|---|---|
| nilsteampassnet/teampass | ≤ 2.1.27.36 | |
| teampass | = 2.1.27.36 |
TeamPass 2.1.27.36 allows Stored XSS by placing a payload in the username field during a login attempt. When an administrator looks at the log of failed logins, the XSS payload will be executed.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free