CVE-2022-3963 | gnuboard5 5.3.1.6/5.3.1.9/5.3.2.0 FAQ Key ID bbs/faq.php fm_id cross site scripting (EUVD-2022-43295)

A vulnerability marked as problematic has been reported in gnuboard5 5.3.1.6/5.3.1.9/5.3.2.0. The impacted element is an unknown function of the file bbs/faq.php of the component FAQ Key ID Handler. The manipulation of the argument fm_id leads to cross site scripting.

This vulnerability is traded as CVE-2022-3963. It is possible to initiate the attack remotely. There is no exploit available.

It is suggested to upgrade the affected component.