Security
Headlines
HeadlinesLatestCVEs

Headline

GHSA-4h2q-84w7-4mhx: nilsteampassnet/teampass vulnerable to stored cross-site scripting (XSS)

nilsteampassnet/teampass prior to 3.0.3 is vulnerable to stored cross-site scripting (XSS) in the description parameter of a folder.

ghsa
#xss#git

nilsteampassnet/teampass vulnerable to stored cross-site scripting (XSS)

Moderate severity GitHub Reviewed Published Apr 13, 2023 to the GitHub Advisory Database • Updated Apr 13, 2023

Related news

CVE-2023-2021: 3.0.3 · nilsteampassnet/TeamPass@77c541a

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.3.