Cross-site scripting (XSS) vulnerability in forum/viewtopic.php in PunBB 1.3 allows remote malicious users to inject arbitrary web script or HTML via the pid parameter.
punbb punbb 1.3