Skip to content
OpenAdvisories

Vendor

cryptpad

4 known vulnerabilities.

Products

cryptpad 4
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 2.9
    CVE-2025-49590

    CryptPad Dom-Based Cross-Site Scripting (XSS) Vulnerability

    CryptPad is a collaboration suite. Prior to version 2025.3.0, the "Link Bouncer" functionality attempts to filter javascript URIs to prevent Cross-Site Scripting (XSS), however this can be bypassed. There is an "early allow" code path that happens before the …

    cryptpad cryptpad