clipbucket vulnerabilities
CVEs whose affected-version data names the clipbucket package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
7 CVEsRSS
CVE-2025-65113Medium· 6.5ClipBucket v5 is an open source video sharing platform
ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 - #164, an authorization bypass vulnerability in the AJAX flagging system allows any unauthenticated user to flag any content (users, videos, photos, collecti…
CVE-2025-64338Critical· 9.0ClipBucket v5 is an open source video sharing platform
ClipBucket v5 is an open source video sharing platform. In versions 5.5.2 - #156 and below, an authenticated regular user can create a photo collection whose Collection Name contains HTML/JavaScript payloads, which making ClipBucket’s Ma…
CVE-2025-64114Medium· 6.5ClipBucket v5 is an open source video sharing platform
ClipBucket v5 is an open source video sharing platform. Versions 5.5.2 - #151 and below allow authenticated administrators with plugin management privileges to execute arbitrary SQL commands against the database through its ClipBucket Cu…
CVE-2025-62429High· 7.2PoCClipBucket v5 is an open source video sharing platform
ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.2 #147, ClipBucket v5 is vulnerable to arbitrary PHP code execution. In /upload/admin_area/actions/update_launch.php, the "type" parameter from a POST request i…
CVE-2025-62424Medium· 6.7ClipBucket is a web-based video-sharing platform
ClipBucket is a web-based video-sharing platform. In ClipBucket version 5.5.2 - #146 and earlier, the /admin_area/template_editor.php endpoint is vulnerable to path traversal. The validation of the file-loading path is inadequate, allowi…
CVE-2025-62430Medium· 5.4ClipBucket v5 is an open source video sharing platform
ClipBucket v5 is an open source video sharing platform. ClipBucket v5 through build 5.5.2 #145 allows stored cross-site scripting (XSS) in multiple video and photo metadata fields. For videos the Tags field and the Genre, Actors, Produce…
CVE-2025-62423Medium· 6.7ClipBucket V5 provides open source video hosting with PHP
ClipBucket V5 provides open source video hosting with PHP. In version5.5.2 - #140 and earlier, a Blind SQL injection vulnerability exists in the Admin Area’s “/admin_area/login_as_user.php” file. Exploiting this vulnerability requires ac…