CVE-2025-62715 - CVE House

Back to Database

Status published Medium CVE-2025-62715

ClipBucket v5: Stored XSS via Collection Tags

5.3 CVSS

Vulnerability Description

ClipBucket v5 is an open source video sharing platform. Versions 5.5.2-#147 and below contain a stored Cross-Site Scripting (XSS) vulnerability in ClipBucket’s Collection tags feature. An authenticated normal user can create a tag containing HTML or JavaScript, which is later rendered unescaped in collection detail and tag-list pages. As a result, arbitrary JavaScript executes in the browsers of all users who view the affected pages. This issue is fixed in version 5.5.2-#152.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-62715

Check My Exposure

Credits & Attribution

No credits recorded in the NVD database.

References

More from MacWarrior

View All →

ClipBucket v5 Unauthenticated Object Flagging Vulnerability

ClipBucket v5: Stored XSS Vulnerability in Manage Playlists

ClipBucket's Manage Photos Feature is Vulnerable to Stored XSS via Collection Name

ClipBucket v5's Manage Photo Feature is Vulnerable to Stored XSS Attack via Photo Title

ClipBucket v5: SQL Injection possible through ClipBucket Custom Fields plugin

Affected Vendor

MacWarrior

View all reports →

Affected Software

clipbucket-v5

Vulnerable Versions:

< 5.5.2-#152

Timeline

Official Publish: November 4th, 2025

Last Modified: November 4th, 2025

Added to House: July 22nd, 2026

CVSS Vectors

Weaknesses (CWE)

MITRE ATT&CK TTPs

T1189 Drive-by Compromise

T1059.007 JavaScript

T1539 Steal Web Session Cookie

T1213 Data from Information Repositories

T1567 Exfiltration Over Web Service

T1491.001 Defacement