<?xml version="1.0" encoding="UTF-8"?>
<rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom">
<channel>
  <title>CVE Daily – PrivateBin (High+Critical)</title>
  <link>https://cvedaily.com/pages/tags/privatebin.html</link>
  <atom:link href="https://cvedaily.com/feed-tags/privatebin-severe.xml" rel="self" type="application/rss+xml"/>
  <description>CVE Daily – PrivateBin (High+Critical)</description>
  <language>en</language>
  <lastBuildDate>Wed, 03 Jun 2026 21:27:04 +0000</lastBuildDate>
  <item>
    <title>[High] CVE-2022-24833 – PrivateBin is minimalist, open source online pastebin clone where the server has...</title>
    <link>https://nvd.nist.gov/vuln/detail/CVE-2022-24833</link>
    <guid isPermaLink="true">https://nvd.nist.gov/vuln/detail/CVE-2022-24833</guid>
    <pubDate>Mon, 11 Apr 2022 21:15:08 +0000</pubDate>
    <description>
<![CDATA[
  <p><strong><span class="badge risk high">High</span> CVE-2022-24833</strong></p>
  <p>PrivateBin is minimalist, open source online pastebin clone where the server has zero knowledge of pasted data. In PrivateBin < v1.4.0 a cross-site scripting (XSS) vulnerability was found. The vulnerability is present in all versions from v0.21 of the project, which was at the time still called ZeroBin. The issue is caused by the fact that SVGs can contain JavaScript. This can allow an attacker t…</p>
  <p><strong>CVSS:</strong> 8.2 · <strong>CWE:</strong> CWE-79</p>
  <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2022-24833">View on NVD</a></p>
]]>
    </description>
  </item>
</channel>
</rss>
