Multiple cross-site scripting (XSS) vulnerabilities in items.php in TeamPass prior to 2.1.20 allow remote malicious users to inject arbitrary web script or HTML via the group parameter, which is not properly handled in a (1) hid_cat or (2) open_folder form element, or (3) id parameter, which is not properly handled in the open_id form element.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
teampass teampass 2.1.3 |
||
teampass teampass 2.1.1 |
||
teampass teampass 2.1.14 |
||
teampass teampass 2.1.10 |
||
teampass teampass |
||
teampass teampass 2.1.19 |
||
teampass teampass 2.1.18 |
||
teampass teampass 2.1.15 |
||
teampass teampass 2.1.5 |
||
teampass teampass 2.1.4 |
||
teampass teampass 2.1.2 |
||
teampass teampass 2.1.13 |
||
teampass teampass 2.1 |
Vulmon