PT-2025-45053 · Unknown · Clipbucket

Published 2025-11-04 · Updated 2025-11-05 · CVE-2025-62715

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions ClipBucket versions 5.5.2 through 5.5.2-#147

Description ClipBucket v5 is a video sharing platform that has a stored Cross-Site Scripting (XSS) issue within its Collection tags feature. A normal, authenticated user can create a tag containing HTML or JavaScript code. This code is then rendered without proper escaping on collection detail and tag-list pages, leading to the execution of arbitrary JavaScript in the browsers of users who view these pages.

Recommendations Update to version 5.5.2-#152 or later.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2025-62715

GHSA-H5F4-WJ75-39X3

Affected Products

Clipbucket

References · 6

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62715.json · Exploit
• https://github.com/MacWarrior/clipbucket-v5/commit/8e3cf79ce2721fbebde68a05a9a1a6319f086bcc · Patch
• https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-h5f4-wj75-39x3 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-62715 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-62715 · Security Note
• https://t.me/CVEtracker/36563 · Telegram Post