FUDforum v3.1.3 was discovered to contain a reflected cross-site scripting (XSS) vulnerability via the chpos parameter at /adm/admsmiley.php.
CWE-79 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')