VYPR
← All advisories
Medium severity4.6NVD Advisory· Published Mar 4, 2025· Updated Jun 17, 2026

CVE-2025-26091

CVE-2025-26091

Description

A Cross Site Scripting (XSS) vulnerability exists in TeamPasswordManager v12.162.284 and before that could allow a remote attacker to execute arbitrary JavaScript in the web browser of a user, by including a malicious payload into the 'name' parameter when creating a new password in the "My Passwords" page.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • TeamPasswordManager/TeamPasswordManager3 versions
    cpe:2.3:a:teampasswordmanager:team_password_manager:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:a:teampasswordmanager:team_password_manager:*:*:*:*:*:*:*:*range: <=12.162.284
    • (no CPE)
    • (no CPE)range: <=12.162.284

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.