CVE-2026-102570 ClipBucket v5 through 5.5.3-#197 SQL Injection via language_id Parameter

ClipBucket v5 through 5.5.3-197 contains a time-based blind SQL injection vulnerability in the language update function where the languageid parameter is concatenated unescaped into the WHERE clause of an UPDATE statement. An authenticated administrator with basicsettings permission can inject...

CVE-2026-102570

ClipBucket versions v5 through 5.5.3-#197 are vulnerable to a time-based blind SQL injection within the language update function. The flaw exists because the language_id parameter is concatenated unescaped into the WHERE clause of an UPDATE statement. This allows an authenticated administrator po...