Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2016-1000307. Reason: This candidate is a reservation duplicate of CVE-2016-1000307. Notes: All CVE users should reference CVE-2016-1000307 instead of this candidate. All references and descriptions in this candidate have been...

CVE-2016-1000306

This CVE-2016-1000306 entry is rejected/not used and does not represent an active vulnerability.

CVE-2016-1000307

CVE-2016-1000307 affects ClipBucket v2.8.1 (and likely earlier) and describes multiple XSS vulnerabilities. An attacker can inject arbitrary web script or HTML via: (1) profile_desc, about_me, schools, occupation, companies, hobbies, fav_movies, fav_music, fav_books on ProfileSettings; (2) note o...