| शीर्षक | Gnuboard https://github.com/gnuboard/g6 version 6.x Stored XSS |
|---|
| विवरण | This stored XSS vulnerability was discovered in the latest version of GnuBoard6. When registered users bookmark and reply to any post on the message board, user input is not properly sanitized, and the reply content is not encoded when displayed. This allows attackers to inject arbitrary JavaScript code, targeting all users who can access the post. Attackers can exploit this vulnerability to steal user cookies, launch phishing attacks, and other malicious activities. |
|---|
| स्रोत | ⚠️ https://github.com/gnuboard/g6/issues/645 |
|---|
| उपयोगकर्ता | ZAST.AI (UID 87884) |
|---|
| सबमिशन | 14/07/2025 11:55 AM (1 वर्ष पहले) |
|---|
| संयम | 18/07/2025 09:24 AM (4 days later) |
|---|
| स्थिति | स्वीकृत |
|---|
| VulDB प्रविष्टि | 316847 [Gnuboard g6 तक 6.0.10 Post Reply qa क्रॉस साइट स्क्रिप्टिंग] |
|---|
| अंक | 20 |
|---|