MEDIUM
Gnuboard g6 Post Reply qa cross site scripting
Published Jul 18, 2025
5.1
MEDIUMCVSS 4.0
EPSS 0.25%
Description
A vulnerability, which was classified as problematic, has been found in Gnuboard g6 up to 6.0.10. This issue affects some unknown processing of the file /bbs/scrap_popin_update/qa/ of the component Post Reply Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Affected products
-
Affected
- 6.0.0
- 6.0.1
- 6.0.10
- 6.0.2
- 6.0.3
- 6.0.4
- 6.0.5
- 6.0.6
- 6.0.7
- 6.0.8
- 6.0.9
No data.
No Red Hat product state for this CVE.
No package ranges for this CVE.
Remediation
No remediation recorded yet.
Weaknesses (2)
References (5)
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-21881 Advisory
- https://github.com/gnuboard/g6/issues/645 exploitissue-trackingIssue Tracking
- https://vuldb.com/?ctiid.316847 signaturepermissions-requiredPermissions RequiredVDB Entry
- https://vuldb.com/?id.316847 vdb-entryThird Party AdvisoryVDB Entry
- https://vuldb.com/?submit.615735 third-party-advisoryThird Party AdvisoryVDB Entry
| Link | Providers | Tags |
|---|---|---|
| https://euvd.enisa.europa.eu/vulnerability/EUVD-2025-21881 | Advisory | |
| https://github.com/gnuboard/g6/issues/645 | exploitissue-trackingIssue Tracking | |
| https://vuldb.com/?ctiid.316847 | signaturepermissions-requiredPermissions RequiredVDB Entry | |
| https://vuldb.com/?id.316847 | vdb-entryThird Party AdvisoryVDB Entry | |
| https://vuldb.com/?submit.615735 | third-party-advisoryThird Party AdvisoryVDB Entry |
Change history (0)
No recorded changes yet.
Sources
CVE.org / MITRE
Status PUBLISHED
Assigner VulDB
Published Jul 18, 2025
Updated Jul 18, 2025
Reserved Jul 18, 2025
Link CVE-2025-7786
CISA Vulnrichment
Updated Jul 18, 2025
Red Hat
No data
GitHub
No data