CVE-2015-7562

Multiple cross-site scripting (XSS) vulnerabilities in TeamPass 2.1.24 and earlier allow remote attackers to inject arbitrary web script or HTML via the (1) label value of an item or (2) name of a role.

• CWE-79

• https://github.com/nilsteampassnet/TeamPass/pull/1140Patch
• https://www.exploit-db.com/exploits/39559/Exploit, Patch, Third Party Advisory
• https://github.com/nilsteampassnet/TeamPass/pull/1140Patch
• https://www.exploit-db.com/exploits/39559/Exploit, Patch, Third Party Advisory

Published

Apr 12, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2015-7556DeleGate 9.9.13 allows local users to gain privileges as dem…7.8
• CVE-2015-7557The _rsvg_node_poly_build_path function in rsvg-shapes.c in …
• CVE-2015-7558librsvg before 2.40.12 allows context-dependent attackers to…
• CVE-2015-7559It was found that the Apache ActiveMQ client before 5.14.5 e…2.7
• CVE-2015-7560The SMB1 implementation in smbd in Samba 3.x and 4.x before …6.5
• CVE-2015-7561Kubernetes in OpenShift3 allows remote authenticated users t…
• CVE-2015-7563Cross-site request forgery (CSRF) vulnerability in TeamPass …8.8
• CVE-2015-7564Multiple SQL injection vulnerabilities in TeamPass 2.1.24 an…
• CVE-2015-7565Cross-site scripting (XSS) vulnerability in Ember.js 1.8.x t…
• CVE-2015-7566The clie_5_attach function in drivers/usb/serial/visor.c in …
• CVE-2015-7567SQL injection vulnerability in Yeager CMS 1.2.1 allows remot…9.8
• CVE-2015-7568SQL injection vulnerability in the password recovery feature…