CVE-2010-0455

PunBB 1.3 is affected by a cross-site scripting (XSS) vulnerability in forum/viewtopic.php via the pid parameter. The root cause is insufficient sanitization of user-supplied pid, allowing remote attackers to inject script or HTML and execute in victims’ browsers (e.g., to steal cookies) as descr...