SecPod Research Team member (Deependra Bapna) has found Multiple Stored Cross-site
Scripting Vulnerabilities in ClipBucket. The vulnerabilities are due to improper validation of various parameters in various pages. This may allow an attacker to steal cookie-based authentication credentials, compromise the application, access or modify data.

Complete Advisory information can be found here.

Advisory in CVRF format can be found here.

 
Welcome any feedback or suggestions.
Cheers!
SecPod Research Team

Leave a Reply

Your email address will not be published. Required fields are marked *