CVE-2016-1000307: Clip-Bucket Clipbucket

Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days.

Multiple Cross Site Scripting (XSS) Vulnerabilities in ClipBucket v2.8.1 and probably prior allow Remote Attackers to inject arbitrary web script or HTML via (1) profile_desc, about_me, schools, occupation, companies, hobbies, fav_movies, fav_music, fav_books parameters to ProfileSettings page; (2) note parameter to PersonalNotes Section; (3) closed_msg, description, allowed_types parameters to WebsiteConfigurations Section. NOTE: the collection_description vector is already covered by CVE-2015-4673.

Affected products

• Clip-Bucket Clipbucket: up to and including 2.8.1

Published 2017-04-06. Last modified 2026-06-17.