CVE-2015-7562

6.1 mediumEPSS 1.8%

Medium (6.1) in teampass teampass. EPSS 1.8% chance of exploitation in the next 30 days.

Multiple cross-site scripting (XSS) vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) label value of an item or (2) name of a role.

Severity

CVSS 3.0

6.1 medium

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

EPSS: 1.8% chance of exploitation in the next 30 days; higher than 78% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2017-04-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

teampass:teampass

References

https://github.com/nilsteampassnet/TeamPass/pull/1140
https://www.exploit-db.com/exploits/39559/
https://github.com/nilsteampassnet/TeamPass/pull/1140
https://www.exploit-db.com/exploits/39559/

Check your stack JSON