Medium severity6.1NVD Advisory· Published Mar 16, 2024· Updated Jun 17, 2026

CVE-2024-24156

Description

Cross Site Scripting (XSS) vulnerability in Gnuboard g6 before Github commit 58c737a263ac0c523592fd87ff71b9e3c07d7cf5, allows remote attackers execute arbitrary code via the wr_content parameter.

Affected products

Gnuboard/g6description
Sir/Gnuboard
cpe:2.3:a:sir:gnuboard:*:*:*:*:*:*:*:*
Range: <6.0.0
gnuboard/g6llm-create
Range: <58c737a263ac0c523592fd87ff71b9e3c07d7cf5

Patches

Vulnerability mechanics

References

github.com/gnuboard/g6/issues/316nvdExploitIssue TrackingVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000