CVE-2025-60859

Medium · 6.1

CVSS

6.1

EPSS

0.3%

Published

Oct 23, 2025

CISA due date

—

The record

Cross Site Scripting (XSS) vulnerability in Gnuboard 5.6.15 allows authenticated attackers to execute arbitrary code via crafted c_id parameter in bbs/view_comment.php.

Affected packages

Ecosystem	Package	Introduced	Fixed