Vulnerabilities in MacWarrior
41 resultsCVE-2025-64114MEDIUMClipBucket v5: SQL Injection possible through ClipBucket Custom Fields pluginEPSS 0.4%CVE-2026-96272HIGHClipBucket v5 before 5.5.3-#182 SQL Injection via search_result.phpEPSS 0.4%CVE-2026-110625MEDIUMClipBucket v5 through 5.5.3-#206 Reflected XSS via type Parameter in flagged_item.phpEPSS 0.4%CVE-2026-110626MEDIUMClipBucket v5 through 5.5.3-#206 Reflected XSS via edit_language in language_settings.phpEPSS 0.4%CVE-2025-62709MEDIUMClipBucket v5 is vulnerable to password reset link manipulationEPSS 0.4%CVE-2026-45418HIGHClipBucket: Blind SQL Injection in subtitle_edit.phpEPSS 0.4%CVE-2026-110627LOWClipBucket v5 through 5.5.3-#206 Reflected XSS via add_todo val ParameterEPSS 0.4%CVE-2026-95812MEDIUMClipBucket v5 before 5.5.3-#182 Reflected XSS via Query ParametersEPSS 0.4%CVE-2026-25728CRITICALClipBucket v5 Affected by Remote Code Execution via Avatar/Background File Upload Race ConditionEPSS 0.3%CVE-2025-64336HIGHClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo TitleEPSS 0.3%CVE-2026-28354MEDIUMClipBucket v5 has IDOR in Collection Item ManagementEPSS 0.3%CVE-2026-102570HIGHClipBucket v5 through 5.5.3-#197 SQL Injection via language_id ParameterEPSS 0.3%CVE-2026-102569HIGHClipBucket v5 through 5.5.3-#197 SQL Injection via videoid ParameterEPSS 0.3%CVE-2026-26005MEDIUMClipBucket v5 enables internal network scans via an SSRF vulnerabilityEPSS 0.3%CVE-2025-64339HIGHClipBucket v5: Stored XSS Vulnerability in Manage PlaylistsEPSS 0.3%CVE-2025-62430MEDIUMClipBucket v5 stored XSS via video/photo fieldsEPSS 0.3%CVE-2026-42847HIGHClipBucket: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')EPSS 0.2%CVE-2026-47238MEDIUMClipBucket: IDOR in videos subtitle editorEPSS 0.2%CVE-2026-26997LOWClipBucket v5 has Stored XSS via Collection nameEPSS 0.2%CVE-2025-62715MEDIUMClipBucket v5: Stored XSS via Collection TagsEPSS 0.2%