medium5.4
CVE-2019-12950
An issue was discovered in TeamPass 2.1.27.35.
Impact
An issue was discovered in TeamPass 2.1.27.35. From the sources/items.queries.php "Import items" feature, it is possible to load a crafted CSV file with an XSS payload.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Teampass | Teampass | Version 2.1.27.35 |