CVE-2025-55912
An issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can exploit the plupload endpoint in photo_uploader.php to upload arbitrary files without any …
Published: 2025-09-18 · CVSS: 7.3 · CVSS 3.1
An issue in ClipBucket 5.5.0 and prior versions allows an unauthenticated attacker can exploit the plupload endpoint in photo_uploader.php to upload arbitrary files without any authentication, due to missing access controls in the upload handler
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7