Vulnerabilities in PrivateBin

6 results

CVE-2022-24833HIGHPersistent Cross-site Scripting (XSS) vulnerability in PrivateBinEPSS 1.2%CVE-2020-5223MEDIUMPersistent XSS vulnerability in filename of attached file in PrivateBinEPSS 0.7%CVE-2024-39899MEDIUMPrivateBin allows shortening of URLs for other domainsEPSS 0.6%CVE-2025-64714MEDIUMPrivateBin's template-switching feature allows arbitrary local file inclusion through path traversalEPSS 0.4%CVE-2025-62796MEDIUMPrivateBin persistent HTML injection in attachment filename enables redirect and defacementEPSS 0.3%CVE-2025-64711LOWPrivateBin vulnerable to malicious filename use for self-XSS / HTML injection locally for usersEPSS 0.1%