CVE-2025-64336 – ClipBucket v5’s Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo Title

CVE ID : CVE-2025-64336

Published : Nov. 7, 2025, 4:32 a.m. | 57 minutes ago

Description : ClipBucket v5 is an open source video sharing platform. In versions 5.5.2-#146 and below, the Manage Photos feature is vulnerable to stored Cross-site Scripting (XSS). An authenticated regular user can upload a photo with a malicious Photo Title containing HTML/JavaScript code. While the payload does not execute in the user-facing photo gallery or detail pages, it is rendered unsafely in the Admin → Manage Photos section, resulting in JavaScript execution in the administrator’s browser. This issue is fixed in version 5.5.2-#147.

Severity: 0.0 | NA

Visit the link for more details, such as CVSS details, affected products, timeline, and more…