CVE-2026-7002

A vulnerability was determined in KLiK SocialMediaWebsite up to 1.0.1. This vulnerability affects unknown code of the file /includes/getmessageajax.php of the component Private Message Handler. Executing a manipulation of the argument cid can lead to sql injection. It is possible to launch the...

CVE-2025-60859

Cross Site Scripting XSS vulnerability in Gnuboard 5.6.15 allows authenticated attackers to execute arbitrary code via crafted cid parameter in bbs/viewcomment.php...

CVE-2025-60859

Gnuboard 5.6.15 is affected by CVE-2025-60859 due to an XSS vulnerability in bbs/view_comment.php caused by crafted c_id parameter. Authenticated attackers can exploit this to execute arbitrary code. Multiple sources (NVD, Red Hat, ENISA EUVD, OSV, CNNVD, CVE list) corroborate the XSS impact. No ...