{"action":"Upgrade nilsteampassnet/teampass to 2.1.25 or later.","affected":[{"fixed":"2.1.25","introduced":"0"}],"component":"nilsteampassnet/teampass","cve_ids":["CVE-2015-7562"],"ecosystem":"Packagist","epss":0.01832,"exploited":false,"fixed_versions":["2.1.25"],"ghsa_id":"GHSA-48q3-m4hf-56c9","id":"tcs_01M5KETTDXEP00KN8RYMDD9T6W","modified_at":"2025-04-22T18:12:16.006704Z","published_at":"2022-05-17T02:49:21Z","references":["https://osv.dev/vulnerability/GHSA-48q3-m4hf-56c9","https://nvd.nist.gov/vuln/detail/CVE-2015-7562","https://github.com/nilsteampassnet/TeamPass/pull/1140","https://github.com/nilsteampassnet/TeamPass","https://www.exploit-db.com/exploits/39559"],"severity":{"label":"medium","score":6.1},"sources":[{"source":"osv","source_id":"GHSA-48q3-m4hf-56c9","url":"https://osv.dev/vulnerability/GHSA-48q3-m4hf-56c9"}],"summary":"TeamPass vulnerable to Cross-site Scripting"}