PrivateBin vulnerabilities

8 published CVEs name PrivateBin among the affected products.

Critical 0High 1Medium 5Low 1Not scored 1

CVEs per yearBy the year they were published

CVE-2026-55891
PrivateBin: Reflected JSON injection in backend responses via unescaped REQUEST_URI
PrivateBin · PrivateBin
None0.0
CVE-2026-55696
PrivateBin: Stored Cross-Side-Scripting (XSS) vulnerability in attachment download link via dangerous MIME types with required user-interaction
PrivateBin · PrivateBin
Medium4.3
CVE-2025-64714
PrivateBin's template-switching feature allows arbitrary local file inclusion through path traversal
PrivateBin · PrivateBin
Medium5.8
CVE-2025-64711
PrivateBin vulnerable to malicious filename use for self-XSS / HTML injection locally for users
PrivateBin · PrivateBin
Low3.9
CVE-2025-62796
PrivateBin persistent HTML injection in attachment filename enables redirect and defacement
PrivateBin · PrivateBin
Medium5.8
CVE-2024-39899
PrivateBin allows shortening of URLs for other domains
PrivateBin · PrivateBin
Medium5.3
CVE-2022-24833
Persistent Cross-site Scripting (XSS) vulnerability in PrivateBin
PrivateBin · PrivateBin
High8.2
CVE-2020-5223
Persistent XSS vulnerability in filename of attached file in PrivateBin
PrivateBin · PrivateBin
Medium6.1