Screamdz

**Name of the Vulnerable Software and Affected Versions** mowdBB version RC-6 **Description** A cross-site scripting (XSS) issue exists, allowing remote attackers to inject arbitrary web script or HTML via the `forum name` parameter in the "board.php" file. **Recommendations** For mowdBB version RC-6, consider restricting access to the `board.php` file until a patch is available, and avoid using the `forum name` parameter in this context to minimize the risk of exploitation.