Lucene search
K

8 matches found

RedhatCVE
RedhatCVE
added 2025/11/08 7:41 a.m.6 views

CVE-2025-64336

ClipBucket v5 is an open source video sharing platform. In versions 5.5.2-146 and below, the Manage Photos feature is vulnerable to stored Cross-site Scripting XSS. An authenticated regular user can upload a photo with a malicious Photo Title containing HTML/JavaScript code. While the payload doe...

8.6CVSS6.6AI score0.00033EPSS
Exploits1References1
OSV
OSV
added 2025/11/07 4:32 a.m.4 views

CVE-2025-64336 ClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo Title

ClipBucket v5 is an open source video sharing platform. In versions 5.5.2-146 and below, the Manage Photos feature is vulnerable to stored Cross-site Scripting XSS. An authenticated regular user can upload a photo with a malicious Photo Title containing HTML/JavaScript code. While the payload doe...

8.6CVSS6.6AI score0.00033EPSS
Exploits1References5
Vulnrichment
Vulnrichment
added 2025/11/07 4:32 a.m.3 views

CVE-2025-64336 ClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo Title

ClipBucket v5 is an open source video sharing platform. In versions 5.5.2-146 and below, the Manage Photos feature is vulnerable to stored Cross-site Scripting XSS. An authenticated regular user can upload a photo with a malicious Photo Title containing HTML/JavaScript code. While the payload doe...

8.6CVSS6.2AI score0.00033EPSS
Exploits1References3
Cvelist
Cvelist
added 2025/11/07 4:32 a.m.6 views

CVE-2025-64336 ClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo Title

ClipBucket v5 is an open source video sharing platform. In versions 5.5.2-146 and below, the Manage Photos feature is vulnerable to stored Cross-site Scripting XSS. An authenticated regular user can upload a photo with a malicious Photo Title containing HTML/JavaScript code. While the payload doe...

8.6CVSS0.00033EPSS
Exploits1References3
CVE
CVE
added 2025/11/07 4:32 a.m.21 views

CVE-2025-64336

Summary: ClipBucket v5 (versions 5.5.2-#146 and earlier) is vulnerable to a stored XSS via the Photo Title in the Admin → Manage Photos feature. An authenticated regular user can upload a photo with HTML/JavaScript code in the title, which is rendered unsafely in the administrator’s Manage Photos...

8.6CVSS6.2AI score0.00033EPSS
Exploits1References3Affected Software1
Positive Technologies
Positive Technologies
added 2025/11/07 12:0 a.m.4 views

PT-2025-45407

Name of the Vulnerable Software and Affected Versions ClipBucket versions 5.5.2-146 and below Description ClipBucket is a video sharing platform. A stored Cross-site Scripting XSS issue exists in the Manage Photos feature. An authenticated regular user can upload a photo with a malicious Photo...

8.6CVSS6.3AI score0.00033EPSS
Exploits1References8
CNNVD
CNNVD
added 2025/11/07 12:0 a.m.3 views

ClipBucket V5 安全漏洞

ClipBucket V5 is a video hosting platform for MacWarrior individual developers. A security vulnerability exists in ClipBucket V5 5.5.2-146 and prior versions, which stems from the Manage Photos feature mishandling the Photo Title parameter, which could lead to a stored cross-site scripting attack...

8.6CVSS5.8AI score0.00033EPSS
Exploits1References4
EUVD
EUVD
added 2025/10/17 5:50 p.m.2 views

EUVD-2025-34915

ClipBucket v5 is an open source video sharing platform. ClipBucket v5 through build 5.5.2 145 allows stored cross-site scripting XSS in multiple video and photo metadata fields. For videos the Tags field and the Genre, Actors, Producer, Executive Producer, and Director fields in Movieinfos accept...

5.4CVSS5.4AI score0.00027EPSS
Exploits1References2
Rows per page
Query Builder