Cross-site scripting (XSS) vulnerability in modules.php in NavBoard 16 (2.6.0) allows remote attackers to inject arbitrary web script or HTML via the module parameter.
- http://packetstorm.linuxsecurity.com/0808-exploits/navboard-lfixss.txt
No PoCs found on GitHub currently.