CVE-2023-2516

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

Cross-site Scripting (XSS) - Stored in GitHub repository nilsteampassnet/teampass prior to 3.0.7.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
May 5, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2023

CVE-2023-251605.3Nextcloud Mail is an email app for the Nextcloud home server platform. Prior to versions 2.2.1, 1.14.5, 1.12.9, and 1.11.8, an attacker can CVE-2023-251615.3Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server and Nextcloud Enterprise SCVE-2023-251625.3Nextcloud Server is the file server software for Nextcloud, a self-hosted productivity platform. Nextcloud Server prior to 24.0.8 and 23.0.1CVE-2023-251636.5Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. All versions of Argo CD starting with v2.6.0-rc1 have an output saCVE-2023-251647.5Tinacms is a Git-backed headless content management system with support for visual editing. Sites being built with @tinacms/cli >= 1.0.0 && CVE-2023-251654.3Helm is a tool that streamlines installing and managing Kubernetes applications.`getHostByName` is a Helm template function introduced in HeCVE-2023-251666.5formula is a math and string formula parser. In versions prior to 3.0.1 crafted user-provided strings to formula's parser might lead to polyCVE-2023-251675.7Discourse is an open source discussion platform. In affected versions a malicious user can cause a regular expression denial of service usinCVE-2023-251688.2Wings is Pterodactyl's server control plane. This vulnerability can be used to delete files and directories recursively on the host system. CVE-2023-251695.3discourse-yearly-review is a discourse plugin which publishes an automated Year in Review topic. In affected versions a user present in a yeCVE-2023-25174.3The Metform Elementor Contact Form Builder plugin for WordPress is vulnerable to Cross-Site Request Forgery in versions up to, and includingCVE-2023-251708.8PrestaShop is an open source e-commerce web application that, prior to version 8.0.1, is vulnerable to cross-site request forgery (CSRF). Wh
CVE-2023-2516: Medium severity, CVSS 5.4 | Vulnix