CVE-2025-64711 | PrivateBin up to 2.0.2 File cross site scripting (GHSA-r9x7-7ggj-fx9f)

November 13, 2025 Yanac

A vulnerability, which was classified as problematic, was found in PrivateBin up to 2.0.2. The impacted element is an unknown function of the component File Handler. Such manipulation leads to cross site scripting.

This vulnerability is documented as CVE-2025-64711. The attack needs to be performed locally. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More