Low
Gnuboard g6 Post Reply qa cross site scripting
Type: advisorySources: OSV
A vulnerability, which was classified as problematic, has been found in Gnuboard g6 up to 6.0.10. This issue affects some unknown processing of the file /bbs/scrap_popin_update/qa/ of the component Post Reply Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
- Products
- Not specified
- Affected versions
- Not specified
- Fixed versions
- Not specified
- CVEs
- CVE-2025-7786
- Confirmed fixed CVEs
- Not specified
- Updated in this feed
- 2 Nov 2026, 23:01 UTC · Revision 1
Source evidence
Gnuboard g6 Post Reply qa cross site scripting
core-osv · Original sourcePublished 18 Jul 2025, 13:14 UTC
A vulnerability, which was classified as problematic, has been found in Gnuboard g6 up to 6.0.10. This issue affects some unknown processing of the file /bbs/scrap_popin_update/qa/ of the component Post Reply Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
osv:CVE-2025-7786
Complete source record
{
"id": "19666aa969c93c94cf9737c3410a8c297c61ce90db58182980604bf46b190306",
"url": "https://osv.dev/vulnerability/CVE-2025-7786",
"method": "structured",
"payload": {
"kind": "advisory",
"title": "Gnuboard g6 Post Reply qa cross site scripting",
"summary": "A vulnerability, which was classified as problematic, has been found in Gnuboard g6 up to 6.0.10. This issue affects some unknown processing of the file /bbs/scrap_popin_update/qa/ of the component Post Reply Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.",
"evidence": "osv:CVE-2025-7786",
"products": [],
"severity": "low",
"structured": {
"id": "CVE-2025-7786",
"aliases": [
"CVE-2025-7786"
],
"metrics": [
{
"type": "CVSS_V4",
"score": "CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P"
}
],
"affected": [
{
"ranges": [
{
"repo": "https://github.com/gnuboard/g6",
"type": "GIT",
"events": [
{
"introduced": "e62a5a878ed8b8024e30ccbc16084db5c0983c72"
},
{
"last_affected": "a4b991a70762f22279c7fffd2d2c5146c3063c07"
}
],
"database_specific": {
"extracted_events": [
{
"range": [
{
"introduced": "6.0.0"
},
{
"last_affected": "6.0.0"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "6.0.1"
},
{
"last_affected": "6.0.1"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "6.0.2"
},
{
"last_affected": "6.0.2"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "6.0.3"
},
{
"last_affected": "6.0.3"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "6.0.4"
},
{
"last_affected": "6.0.4"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "6.0.5"
},
{
"last_affected": "6.0.5"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "6.0.6"
},
{
"last_affected": "6.0.6"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "6.0.7"
},
{
"last_affected": "6.0.7"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "6.0.8"
},
{
"last_affected": "6.0.8"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "6.0.9"
},
{
"last_affected": "6.0.9"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"range": [
{
"introduced": "6.0.10"
},
{
"last_affected": "6.0.10"
}
],
"source": "AFFECTED_FIELD",
"strategy": "StandaloneSingleVersion"
},
{
"cpe": "cpe:2.3:a:sir:gnuboard:*:*:*:*:*:*:*:*",
"range": [
{
"introduced": "0"
},
{
"last_affected": "6.0.10"
}
],
"source": "CPE_RANGE"
}
]
}
}
],
"versions": [
"6.0.0",
"6.0.1",
"6.0.10",
"6.0.2",
"6.0.3",
"6.0.4",
"6.0.5",
"6.0.6",
"6.0.7",
"6.0.8",
"6.0.9"
],
"database_specific": {
"source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-7786.json"
}
}
],
"modified": "2026-10-28T02:30:24.133738275Z",
"provider": "osv",
"references": [
"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/7xxx/CVE-2025-7786.json",
"https://nvd.nist.gov/vuln/detail/CVE-2025-7786",
"https://vuldb.com/?id.316847",
"https://vuldb.com/?submit.615735",
"https://github.com/gnuboard/g6/issues/645",
"https://vuldb.com/?ctiid.316847"
],
"provider_metadata": {
"cwe_ids": [
"CWE-79",
"CWE-94"
],
"cna_assigner": "VulDB",
"osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/7xxx/CVE-2025-7786.json"
}
},
"related_cves": [
{
"value": "CVE-2025-7786",
"evidence": "/id"
}
],
"security_relevant": true,
"severity_evidence": "/severity/0/score"
},
"source_id": "core-osv",
"document_id": 490690,
"published_at": "2025-07-18T13:14:05.648+00:00"
}