CVE-2017-15051

CVE-2017-15051 describes multiple stored cross-site scripting (XSS) vulnerabilities in TeamPass versions prior to 2.1.27.9. An authenticated attacker can inject malicious web scripts through the URL field of an item or by manipulating their user profile to affect an administrator viewing the log. Rated as Medium severity (CVSS 5.4), successful exploitation requires user interaction and could lead to limited impact on confidentiality and integrity. There is no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this vulnerability.