CVE-2018-18678 | GNUBOARD5 up to 5.3.1.x Extra Contents boardgroup_form_update.php gr_1~10 cross site scripting
A vulnerability, which was classified as problematic, was found in GNUBOARD5 up to 5.3.1.x. Affected is an unknown function of the file adm/boardgroup_form_update.php of the component Extra Contents. The manipulation of the argument gr_1~10 as part of Parameter leads to cross site scripting.
This vulnerability is traded as CVE-2018-18678. It is possible to launch the attack remotely. There is no exploit available.
It is recommended to upgrade the affected component.