Skip to content
OpenAdvisories

Vendor

PrivateBin

8 known vulnerabilities.

Products

PrivateBin 8
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 3.9
    CVE-2025-64711

    PrivateBin vulnerable to malicious filename use for self-XSS / HTML injection locally for users

    PrivateBin is an online pastebin where the server has zero knowledge of pasted data. Starting in version 1.7.7 and prior to version 2.0.3, dragging a file whose filename contains HTML is reflected verbatim into the page via the drag-and-drop helper, so any us…

    PrivateBin PrivateBin privatebin/privatebin Packagist