PT-2026-114069 · Macwarrior · Clipbucket-V5
CVSS v3.1
4.7
Medium
| Vector | AV:N/AC:H/PR:N/UI:R/S:C/C:L/I:L/A:N |
ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin area/index.php that allows attackers to inject HTML via the val parameter in mode=add todo. Attackers can lure a logged-in administrator into submitting a cross-site POST form without CSRF protection, executing script in the admin panel origin.
Exploit
Fix
XSS
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Clipbucket-V5