CVE-2016-1000307: XSS
Multiple Cross Site Scripting (XSS) Vulnerabilities in ClipBucket v2.8.1 and probably prior allow Remote Attackers to inject arbitrary web script or HTML via (1) profiledesc, aboutme, schools, occupation, companies, hobbies, favmovies, favmusic, favbooks parameters to ProfileSettings page; (2) note parameter to PersonalNotes Section; (3) closedmsg, description, allowedtypes parameters to WebsiteConfigurations Section. NOTE: the collectiondescription vector is already covered by CVE-2015-4673.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2016-1000307?
CVE-2016-1000307 has a medium severity due to the potential impact of Cross Site Scripting (XSS) vulnerabilities.
How do I fix CVE-2016-1000307?
To fix CVE-2016-1000307, update ClipBucket to version 2.8.1 or later, which addresses the identified XSS vulnerabilities.
What software versions are affected by CVE-2016-1000307?
CVE-2016-1000307 affects ClipBucket version 2.8.1 and possibly earlier versions.
What can attackers do with CVE-2016-1000307?
Attackers exploiting CVE-2016-1000307 can inject arbitrary web scripts or HTML into user profiles.
Where can I find more information about CVE-2016-1000307?
Detailed information about CVE-2016-1000307 can typically be found in vulnerability databases and advisory reports.