medium5.4
CVE-2019-17204
TeamPass Stored Cross-site Scripting
Impact
TeamPass 2.1.27.36 allows Stored XSS by setting a crafted Knowledge Base label and adding any available item.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| composer | nilsteampassnet/teampass | <= 2.1.27.36 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Teampass | Teampass | Version 2.1.27.36 |