Description
ClipBucket v5 through 5.5.3-#206 contains a reflected cross-site scripting vulnerability in admin_area/language_settings.php via the unencoded edit_language GET parameter. Attackers can send administrators with basic_settings permission a crafted link whose payload is echoed into a hidden input, executing script in the admin panel origin.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| MacWarrior | clipbucket-v5 | ≤ 5.5.3-#206 | — |
References
- https://hackmd.io/@leediay/BJR_lh2ifg third-party-advisory
- edit_language accepted after an integer-cast lookup technical-description
- raw edit_language echoed into the hidden input technical-description
- Proposed fix (PR #939, unmerged at time of assignment) patch
- https://github.com/MacWarrior/clipbucket-v5 product
- VulnCheck Advisory: ClipBucket v5 through 5.5.3-#206 Reflected XSS via edit_language in language_settings.php third-party-advisory