CVE-2025-64338

CVE-2025-64338 affects ClipBucket v5. In versions 5.5.2 - #156 and below, an authenticated regular user can create a photo collection whose Collection Name contains HTML/JavaScript payloads. The payload is rendered unsafely in the Admin → Manage Photos interface, enabling a Stored XSS condition i...