Medium severity6.1NVD Advisory· Published Oct 23, 2025· Updated Jun 17, 2026

CVE-2025-60859

Description

Cross Site Scripting (XSS) vulnerability in Gnuboard 5.6.15 allows authenticated attackers to execute arbitrary code via crafted c_id parameter in bbs/view_comment.php.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

gnuboard/Gnuboard5llm-fuzzy2 versions
= 5.6.15+ 1 more
- (no CPE)range: = 5.6.15
- (no CPE)
Sir/Gnuboard
cpe:2.3:a:sir:gnuboard:5.6.15:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/gnuboard/gnuboard5/commit/002e43e5fb84b465357b445772c881e196e100d3nvdPatch
creeperkirby.notion.site/Gnboard5-5-6-15-reflected-XSS-25c4fe7db8cf80efa20fc2ebefcfe61envdExploitThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.397
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000