PasswordPusher vulnerabilities
We track 1 vulnerability in PasswordPusher products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 8, 2026.
1vulnerabilities
0critical
1high
0exploited
8.2average CVSS score
Latest PasswordPusher vulnerabilities
- 8.2 High severity
PasswordPusher: Permissive List of Allowed Inputs
PasswordPusher before 2.8.1 accepts data URI schemes in URL push payloads due to insufficient validation in the valid_url function. Attackers can create malicious pushes containing data:text/html URIs that execute arbitrary JavaScript in victims' browsers when