Unrated severityNVD Advisory· Published Oct 23, 2025· Updated Oct 23, 2025

CVE-2025-60859

Description

Cross Site Scripting (XSS) vulnerability in Gnuboard 5.6.15 allows authenticated attackers to execute arbitrary code via crafted c_id parameter in bbs/view_comment.php.

Affected products

Gnuboard/Gnuboarddescription
gnuboard/gnuboard4llm-fuzzy
Range: = 5.6.15

Patches

No patches discovered yet.

Vulnerability mechanics

AI mechanics synthesis has not run for this CVE yet.

References

creeperkirby.notion.site/Gnboard5-5-6-15-reflected-XSS-25c4fe7db8cf80efa20fc2ebefcfe61emitre
github.com/gnuboard/gnuboard5/commit/002e43e5fb84b465357b445772c881e196e100d3mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000