CVE-2026-95812Published
ClipBucket v5 before 5.5.3-#182 Reflected XSS via Query Parameters
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-95812 · Microsoft / collected KEV context
cve-program · CVE-2026-95812
- https://github.com/MacWarrior/clipbucket-v5/commit/032f46937e091e22afa6c99f2c888575cc94e44b
- https://github.com/MacWarrior/clipbucket-v5/releases/tag/5.5.3-%23182
- https://github.com/MacWarrior/clipbucket-v5/blob/5.5.3-%23153/upload/includes/functions.php
- https://hackmd.io/@leediay/reflected-xss-in-search-function-clipbucket-v5
- https://github.com/MacWarrior/clipbucket-v5
- https://www.vulncheck.com/advisories/clipbucket-v5-before-5.5.3-182-reflected-xss-via-query-parameters
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.