CVE-2025-7786

See a problem?
Please try reporting it to the source first.

Source

https://cve.org/CVERecord?id=CVE-2025-7786

Import Source

https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-7786.json

JSON Data

https://api.osv.dev/v1/vulns/CVE-2025-7786

Published

2025-07-18T13:14:05.648Z

Modified

2026-07-15T01:49:12.755152244Z

Severity

2.0 (Low) CVSS_V4 - CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P CVSS Calculator

Summary

Gnuboard g6 Post Reply qa cross site scripting

Details

A vulnerability, which was classified as problematic, has been found in Gnuboard g6 up to 6.0.10. This issue affects some unknown processing of the file /bbs/scrappopinupdate/qa/ of the component Post Reply Handler. The manipulation leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

Database specific

{
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/7xxx/CVE-2025-7786.json",
    "cna_assigner": "VulDB",
    "cwe_ids": [
        "CWE-79",
        "CWE-94"
    ]
}

References

Affected packages

Git / github.com/gnuboard/g6

Affected ranges

Type

GIT

Repo

https://github.com/gnuboard/g6

Events

Introduced

e62a5a878ed8b8024e30ccbc16084db5c0983c72

Last affected

a4b991a70762f22279c7fffd2d2c5146c3063c07

Database specific

{
    "cpe": "cpe:2.3:a:sir:gnuboard:*:*:*:*:*:*:*:*",
    "source": [
        "AFFECTED_FIELD",
        "CPE_RANGE"
    ],
    "extracted_events": [
        {
            "introduced": "6.0.0"
        },
        {
            "last_affected": "6.0.0"
        },
        {
            "introduced": "6.0.1"
        },
        {
            "last_affected": "6.0.1"
        },
        {
            "introduced": "6.0.2"
        },
        {
            "last_affected": "6.0.2"
        },
        {
            "introduced": "6.0.3"
        },
        {
            "last_affected": "6.0.3"
        },
        {
            "introduced": "6.0.4"
        },
        {
            "last_affected": "6.0.4"
        },
        {
            "introduced": "6.0.5"
        },
        {
            "last_affected": "6.0.5"
        },
        {
            "introduced": "6.0.6"
        },
        {
            "last_affected": "6.0.6"
        },
        {
            "introduced": "6.0.7"
        },
        {
            "last_affected": "6.0.7"
        },
        {
            "introduced": "6.0.8"
        },
        {
            "last_affected": "6.0.8"
        },
        {
            "introduced": "6.0.9"
        },
        {
            "last_affected": "6.0.9"
        },
        {
            "introduced": "6.0.10"
        },
        {
            "last_affected": "6.0.10"
        },
        {
            "introduced": "0"
        }
    ]
}

Affected versions

6.*

6.0.0

6.0.1

6.0.10

6.0.2

6.0.3

6.0.4

6.0.5

6.0.6

6.0.7

6.0.8

6.0.9

Database specific

source

"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-7786.json"