agentprime: macwarrior-clipbucket-v5Every new CVE for macwarrior-clipbucket-v5.https://agentprime.io/CVE-2026-110627: ClipBucket v5 through 5.5.3-#206 Reflected XSS via add_todo val Parameterhttps://agentprime.io/advisories/CVE-2026-110627/https://agentprime.io/advisories/CVE-2026-110627/CVSS 2.1 (Low). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 14:17:02 GMTCVECVE-2026-110626: ClipBucket v5 through 5.5.3-#206 Reflected XSS via edit_language in language_settings.phphttps://agentprime.io/advisories/CVE-2026-110626/https://agentprime.io/advisories/CVE-2026-110626/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 14:17:01 GMTCVECVE-2026-110625: ClipBucket v5 through 5.5.3-#206 Reflected XSS via type Parameter in flagged_item.phphttps://agentprime.io/advisories/CVE-2026-110625/https://agentprime.io/advisories/CVE-2026-110625/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 14 Oct 2026 14:17:01 GMTCVECVE-2026-103766: ClipBucket v5 through 5.5.3-#197 SQL Injection via ads_manager.php delete Parameterhttps://agentprime.io/advisories/CVE-2026-103766/https://agentprime.io/advisories/CVE-2026-103766/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 01 Oct 2026 23:20:00 GMTCVECVE-2026-102570: ClipBucket v5 through 5.5.3-#197 SQL Injection via language_id Parameterhttps://agentprime.io/advisories/CVE-2026-102570/https://agentprime.io/advisories/CVE-2026-102570/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 14:22:38 GMTCVECVE-2026-102569: ClipBucket v5 through 5.5.3-#197 SQL Injection via videoid Parameterhttps://agentprime.io/advisories/CVE-2026-102569/https://agentprime.io/advisories/CVE-2026-102569/CVSS 7.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 29 Sep 2026 14:22:38 GMTCVECVE-2026-100372: ClipBucket v5 before 5.5.3-#197 Path Traversal via template_editor.phphttps://agentprime.io/advisories/CVE-2026-100372/https://agentprime.io/advisories/CVE-2026-100372/CVSS 8.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 25 Sep 2026 19:38:29 GMTCVECVE-2026-96272: ClipBucket v5 before 5.5.3-#182 SQL Injection via search_result.phphttps://agentprime.io/advisories/CVE-2026-96272/https://agentprime.io/advisories/CVE-2026-96272/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 00:29:50 GMTCVECVE-2026-95812: ClipBucket v5 before 5.5.3-#182 Reflected XSS via Query Parametershttps://agentprime.io/advisories/CVE-2026-95812/https://agentprime.io/advisories/CVE-2026-95812/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 22 Sep 2026 20:21:10 GMTCVECVE-2026-77929: ClipBucket < 5.5.3-#182 Remote Code Execution via Photo Upload Endpointhttps://agentprime.io/advisories/CVE-2026-77929/https://agentprime.io/advisories/CVE-2026-77929/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 14:23:40 GMTCVECVE-2026-77928: ClipBucket < 5.5.3-#182 Blind SQL Injection via Private Message Deletion Endpointhttps://agentprime.io/advisories/CVE-2026-77928/https://agentprime.io/advisories/CVE-2026-77928/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 14:20:16 GMTCVECVE-2026-77927: ClipBucket < 5.5.3-#182 Blind SQL Injection via Photo Deletion Endpointhttps://agentprime.io/advisories/CVE-2026-77927/https://agentprime.io/advisories/CVE-2026-77927/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 18 Sep 2026 14:17:43 GMTCVECVE-2026-80138: ClipBucket V5 5.5.1 through 5.5.3-#153 OS Command Injection via Installer php_cli_filepath Parameterhttps://agentprime.io/advisories/CVE-2026-80138/https://agentprime.io/advisories/CVE-2026-80138/CVSS 9.2 (Critical). Critical: CVSS score 9.2: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 25 Aug 2026 22:12:23 GMTCVEcriticalCVE-2026-49482: ClipBucket: SQL Wildcard Injection in Subtitle Edit Endpoint Allows Mass Subtitle Overwritehttps://agentprime.io/advisories/CVE-2026-49482/https://agentprime.io/advisories/CVE-2026-49482/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Jun 2026 22:55:17 GMTCVECVE-2026-47238: ClipBucket: IDOR in videos subtitle editorhttps://agentprime.io/advisories/CVE-2026-47238/https://agentprime.io/advisories/CVE-2026-47238/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Jun 2026 22:53:17 GMTCVECVE-2026-45060: ClipBucket: Blind SQL Injection in progress_video.phphttps://agentprime.io/advisories/CVE-2026-45060/https://agentprime.io/advisories/CVE-2026-45060/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Jun 2026 22:51:47 GMTCVEcriticalCVE-2026-42846: ClipBucket: Remote Play URL Command Injectionhttps://agentprime.io/advisories/CVE-2026-42846/https://agentprime.io/advisories/CVE-2026-42846/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Jun 2026 22:49:58 GMTCVEcriticalCVE-2026-45418: ClipBucket: Blind SQL Injection in subtitle_edit.phphttps://agentprime.io/advisories/CVE-2026-45418/https://agentprime.io/advisories/CVE-2026-45418/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 11 Jun 2026 22:48:32 GMTCVECVE-2026-42847: ClipBucket: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')https://agentprime.io/advisories/CVE-2026-42847/https://agentprime.io/advisories/CVE-2026-42847/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 14 May 2026 20:45:54 GMTCVECVE-2026-32321: ClipBucket v5 has time-based Blind SQL Injection in ajax.php that leads to Data Exfiltrationhttps://agentprime.io/advisories/CVE-2026-32321/https://agentprime.io/advisories/CVE-2026-32321/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 18 Mar 2026 20:37:51 GMTCVECVE-2026-28354: ClipBucket v5 has IDOR in Collection Item Managementhttps://agentprime.io/advisories/CVE-2026-28354/https://agentprime.io/advisories/CVE-2026-28354/CVSS 5.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Feb 2026 19:18:25 GMTCVECVE-2026-26997: ClipBucket v5 has Stored XSS via Collection namehttps://agentprime.io/advisories/CVE-2026-26997/https://agentprime.io/advisories/CVE-2026-26997/CVSS 2.0 (Low). Published by the CVE Program. Not analysed by agentprime yet.Fri, 27 Feb 2026 19:15:11 GMTCVECVE-2026-26005: ClipBucket v5 enables internal network scans via an SSRF vulnerabilityhttps://agentprime.io/advisories/CVE-2026-26005/https://agentprime.io/advisories/CVE-2026-26005/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 12 Feb 2026 20:34:01 GMTCVECVE-2026-25728: ClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race Conditionhttps://agentprime.io/advisories/CVE-2026-25728/https://agentprime.io/advisories/CVE-2026-25728/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 10 Feb 2026 17:12:04 GMTCVEcriticalCVE-2026-21875: ClipBucket v5 Vulnerable to Blind SQL Injection through Channel Commentshttps://agentprime.io/advisories/CVE-2026-21875/https://agentprime.io/advisories/CVE-2026-21875/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Wed, 07 Jan 2026 23:52:18 GMTCVEcriticalCVE-2025-64338: ClipBucket's Manage Photos Feature is Vulnerable to Stored XSS via Collection Namehttps://agentprime.io/advisories/CVE-2025-64338/https://agentprime.io/advisories/CVE-2025-64338/CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 15 Dec 2025 22:55:03 GMTCVECVE-2025-65113: ClipBucket v5 Unauthenticated Object Flagging Vulnerabilityhttps://agentprime.io/advisories/CVE-2025-65113/https://agentprime.io/advisories/CVE-2025-65113/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Sat, 29 Nov 2025 00:34:04 GMTCVECVE-2025-62709: ClipBucket v5 is vulnerable to password reset link manipulationhttps://agentprime.io/advisories/CVE-2025-62709/https://agentprime.io/advisories/CVE-2025-62709/CVSS 6.8 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 20 Nov 2025 16:50:03 GMTCVECVE-2025-64339: ClipBucket v5: Stored XSS Vulnerability in Manage Playlistshttps://agentprime.io/advisories/CVE-2025-64339/https://agentprime.io/advisories/CVE-2025-64339/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Nov 2025 05:12:37 GMTCVECVE-2025-64336: ClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo Titlehttps://agentprime.io/advisories/CVE-2025-64336/https://agentprime.io/advisories/CVE-2025-64336/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 07 Nov 2025 04:32:10 GMTCVECVE-2025-64114: ClipBucket v5: SQL Injection possible through ClipBucket Custom Fields pluginhttps://agentprime.io/advisories/CVE-2025-64114/https://agentprime.io/advisories/CVE-2025-64114/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 05 Nov 2025 23:30:59 GMTCVECVE-2025-62715: ClipBucket v5: Stored XSS via Collection Tagshttps://agentprime.io/advisories/CVE-2025-62715/https://agentprime.io/advisories/CVE-2025-62715/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 04 Nov 2025 21:37:32 GMTCVECVE-2025-62429: ClipBucket v5 executes arbitrary PHP codehttps://agentprime.io/advisories/CVE-2025-62429/https://agentprime.io/advisories/CVE-2025-62429/CVSS 7.2 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 20 Oct 2025 16:08:02 GMTCVECVE-2025-62430: ClipBucket v5 stored XSS via video/photo fieldshttps://agentprime.io/advisories/CVE-2025-62430/https://agentprime.io/advisories/CVE-2025-62430/CVSS 5.4 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Oct 2025 17:50:23 GMTCVECVE-2025-62424: ClipBucket path traversal vulnerability in template editor allows arbitrary file read and writehttps://agentprime.io/advisories/CVE-2025-62424/https://agentprime.io/advisories/CVE-2025-62424/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Oct 2025 17:23:27 GMTCVECVE-2025-62423: ClipBucket V5 Blind SQL injection in the Admin Panelhttps://agentprime.io/advisories/CVE-2025-62423/https://agentprime.io/advisories/CVE-2025-62423/CVSS 6.7 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 16 Oct 2025 18:40:44 GMTCVECVE-2025-21624: ClipBucket V5 Playlist Cover File Upload to Remote Code Executionhttps://agentprime.io/advisories/CVE-2025-21624/https://agentprime.io/advisories/CVE-2025-21624/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jan 2025 15:46:11 GMTCVEcriticalCVE-2025-21623: ClipBucket V5 Unauthenticated Template Directory Update to Denial-of-Servicehttps://agentprime.io/advisories/CVE-2025-21623/https://agentprime.io/advisories/CVE-2025-21623/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jan 2025 15:43:11 GMTCVECVE-2025-21622: ClipBucket V5 Avatar URL Path Traversal to Arbitrary File Deletehttps://agentprime.io/advisories/CVE-2025-21622/https://agentprime.io/advisories/CVE-2025-21622/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 07 Jan 2025 15:33:40 GMTCVECVE-2024-54135: Untrusted Deserialization in ClipBucket-v5 Version 2.0 to 5.5.1 Revision 199https://agentprime.io/advisories/CVE-2024-54135/https://agentprime.io/advisories/CVE-2024-54135/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Dec 2024 15:11:04 GMTCVEcriticalCVE-2024-54136: Untrusted Deserialization in ClipBucket-v5 Version 5.5.1 Revision 199 and Belowhttps://agentprime.io/advisories/CVE-2024-54136/https://agentprime.io/advisories/CVE-2024-54136/CVSS 9.8 (Critical). Critical: CVSS score 9.8: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 06 Dec 2024 15:07:42 GMTCVEcritical