PrivateBin vulnerabilities
8 published CVEs name PrivateBin among the affected products.
- 8Published CVEs7 of them scored
- 2Last 12 monthspublished in the last year
- 0Critical1 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2026-55891
PrivateBin: Reflected JSON injection in backend responses via unescaped REQUEST_URI
PrivateBin · PrivateBin
None0.0 - CVE-2026-55696
PrivateBin: Stored Cross-Side-Scripting (XSS) vulnerability in attachment download link via dangerous MIME types with required user-interaction
PrivateBin · PrivateBin
Medium4.3 - CVE-2025-64714
PrivateBin's template-switching feature allows arbitrary local file inclusion through path traversal
PrivateBin · PrivateBin
Medium5.8 - CVE-2025-64711
PrivateBin vulnerable to malicious filename use for self-XSS / HTML injection locally for users
PrivateBin · PrivateBin
Low3.9 - CVE-2025-62796
PrivateBin persistent HTML injection in attachment filename enables redirect and defacement
PrivateBin · PrivateBin
Medium5.8 - CVE-2024-39899
PrivateBin allows shortening of URLs for other domains
PrivateBin · PrivateBin
Medium5.3 - CVE-2022-24833
Persistent Cross-site Scripting (XSS) vulnerability in PrivateBin
PrivateBin · PrivateBin
High8.2 - CVE-2020-5223
Persistent XSS vulnerability in filename of attached file in PrivateBin
PrivateBin · PrivateBin
Medium6.1