CVE-2023-2021 MEDIUM

CVE-2023-2021: Cross-site Scripting (XSS) - Stored in nilsteampassnet/teampass

Vendor Nilsteampassnet
Product nilsteampassnet/teampass
Weakness CWE-79 · XSS
Published April 13, 2023
Last update February 6, 2025
View on NVD All CVEs

CVSS base score

5.8/10
Attack vector Local
Attack complexity High
Privileges required None
User interaction Required
Confidentiality High
Integrity Low

CVSS vector

CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:L/A:L

What the vulnerability does

01Description

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.3.

Key dates

02Disclosure timeline

April 13, 2023 CVE published
February 6, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2024-10198 code-projects Pharmacy Management System Manage Customer Page manage_customer.php cross site scripting CVE-2025-4587 A/B Testing for WordPress <= 1.18.2 - Authenticated (Contributor+) Stored Cross-Site Scripting CVE-2024-43217 WordPress Kodex Posts likes plugin <= 2.5.0 - Reflected Cross Site Scripting (XSS) vulnerability CVE-2020-11065 Cross-Site Scripting in TYPO3 CMS CVE-2025-3327 iteaj iboot 物联网网关 File Upload batch cross site scripting