Unrated severityNVD Advisory· Published Oct 23, 2025· Updated Oct 23, 2025

CVE-2025-60859

Description

Cross Site Scripting (XSS) vulnerability in Gnuboard 5.6.15 allows authenticated attackers to execute arbitrary code via crafted c_id parameter in bbs/view_comment.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

gnuboard/Gnuboard5cpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: = 5.6.15

Patches

Vulnerability mechanics

References

creeperkirby.notion.site/Gnboard5-5-6-15-reflected-XSS-25c4fe7db8cf80efa20fc2ebefcfe61emitre
github.com/gnuboard/gnuboard5/commit/002e43e5fb84b465357b445772c881e196e100d3mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000