A Cross Site Scripting (XSS) vulnerability exists in TeamPasswordManager v12.162.284 and before that could allow a remote attacker to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'name' parameter when creating a new password in the "My Passwords" page.
CVSS
No CVSS.
References
| Link | Resource |
|---|---|
| https://brunocaseiro.github.io/CVE-2025-26091/ | Exploit Third Party Advisory |
Configurations
History
21 May 2025, 15:00
| Type | Values Removed | Values Added |
|---|---|---|
| References | () https://brunocaseiro.github.io/CVE-2025-26091/ - Exploit, Third Party Advisory | |
| First Time |
Teampasswordmanager
Teampasswordmanager team Password Manager |
|
| CPE | cpe:2.3:a:teampasswordmanager:team_password_manager:*:*:*:*:*:*:*:* |
04 Mar 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2025-03-04 17:15
Updated : 2025-05-21 15:00
NVD link : CVE-2025-26091
Mitre link : CVE-2025-26091
JSON object : View
Products Affected
teampasswordmanager
- team_password_manager
CWE
No CWE.