CVE-2019-16904

5.4 mediumEPSS 0.7%

Medium (5.4) in teampass teampass. EPSS 0.7% chance of exploitation in the next 30 days.

TeamPass 2.1.27.36 allows Stored XSS by setting a crafted password for an item in a common available folder or sharing the item with an admin. (The crafted password is exploitable when viewing the change history of the item or tapping on the item.)

Severity

CVSS 3.1

5.4 medium

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

EPSS: 0.7% chance of exploitation in the next 30 days; higher than 52% of CVEs (scores of 2026-10-31)
CWE: CWE-79
Published: 2019-09-26
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

teampass:teampass

References

https://github.com/nilsteampassnet/TeamPass/issues/2685
https://github.com/nilsteampassnet/TeamPass/issues/2685

Check your stack JSON