A cross site scripting vulnerability was found in the 1.3.x and below versions of the NewBB PHP forum.