CL
Product
clipbucket-v5
41
CVEs
0
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 8High 13Medium 20Low 0
Watch
Add clipbucket-v5 to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2026-77928 | 6.5 | Sep 18 | ClipBucket < 5.5.3-#182 Blind SQL Injection via Private Message Deletion Endpoint Affected: before 5.5.3-#182 |
| CVE-2026-77927 | 6.5 | Sep 18 | ClipBucket < 5.5.3-#182 Blind SQL Injection via Photo Deletion Endpoint Affected: before 5.5.3-#182 |
| CVE-2026-47238 | 6.5 | Jun 11 | ClipBucket: IDOR in videos subtitle editor Affected: < 5.5.3 - #133 |
| CVE-2026-28354 | 6.5 | Feb 27 | ClipBucket v5 has IDOR in Collection Item Management Affected: < 5.5.3 - #59 |
| CVE-2025-65113 | 6.5 | Nov 29 | ClipBucket v5 Unauthenticated Object Flagging Vulnerability Affected: < 5.5.2 - #164 |
| CVE-2025-64114 | 6.5 | Nov 5 | ClipBucket v5: SQL Injection possible through ClipBucket Custom Fields plugin Affected: < 5.5.2-#152 |
| CVE-2025-62424 | 6.5 | Oct 17 | ClipBucket path traversal vulnerability in template editor allows arbitrary file read and write Affected: < 5.5.2 - #147 |
| CVE-2026-110626 | 6.1 | Oct 14 | ClipBucket v5 through 5.5.3-#206 Reflected XSS via edit_language in language_settings.php Affected: through 5.5.3-#206 |
| CVE-2026-110625 | 6.1 | Oct 14 | ClipBucket v5 through 5.5.3-#206 Reflected XSS via type Parameter in flagged_item.php Affected: through 5.5.3-#206 |
| CVE-2026-95812 | 6.1 | Sep 22 | ClipBucket v5 before 5.5.3-#182 Reflected XSS via Query Parameters Affected: before 5.5.3-#182 |
| CVE-2026-102570 | 5.5 | Sep 29 | ClipBucket v5 through 5.5.3-#197 SQL Injection via language_id Parameter Affected: through 5.5.3-#197 |
| CVE-2026-102569 | 5.5 | Sep 29 | ClipBucket v5 through 5.5.3-#197 SQL Injection via videoid Parameter Affected: through 5.5.3-#197 |
| CVE-2026-26997 | 5.4 | Feb 27 | ClipBucket v5 has Stored XSS via Collection name Affected: < 5.5.3 #59 |
| CVE-2025-64339 | 5.4 | Nov 7 | ClipBucket v5: Stored XSS Vulnerability in Manage Playlists Affected: < 5.5.2-#147 |
| CVE-2025-64336 | 5.4 | Nov 7 | ClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo Title Affected: < 5.5.2-#147 |
| CVE-2025-62715 | 5.4 | Nov 4 | ClipBucket v5: Stored XSS via Collection Tags Affected: < 5.5.2-#152 |
| CVE-2025-62430 | 5.4 | Oct 17 | ClipBucket v5 stored XSS via video/photo fields Affected: < 5.5.2 - #146 |
| CVE-2026-26005 | 5.0 | Feb 12 | ClipBucket v5 enables internal network scans via an SSRF vulnerability Affected: < 5.5.3 - #45 |
| CVE-2026-110627 | 4.7 | Oct 14 | ClipBucket v5 through 5.5.3-#206 Reflected XSS via add_todo val Parameter Affected: through 5.5.3-#206 |
| CVE-2026-49482 | 4.3 | Jun 11 | ClipBucket: SQL Wildcard Injection in Subtitle Edit Endpoint Allows Mass Subtitle Overwrite Affected: < 5.5.3 - #141 |
Showing 20