ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/flagged_item.php via the unencoded type GET parameter. Attackers can send crafted flagged_item.php?type= links to logged-in administrators or moderators to execute injected script in the admin panel origin.
2026年10月16日
CVE-2026-110625 [MEDIUM] – ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability i
📑 文章目录



