XSS in Teampass

CVE-2026-3106

Blind Cross-Site Scripting (XSS) in Teampass, versions prior to 3.1.5.16, within the password manager login functionality in the 'contraseña' parameter of the login form 'redacted/index.php'. During failed authentication attempts, the appl…

Vulnerability class: XSS (Cross-Site Scripting)

EPSS: 0.000 (11.9th percentile) — read the EPSS interpretation.