Secunia Security Advisory – Digital-X has reported two vulnerabilities in Private Message System module for PunBB, which can be exploited by malicious people to conduct cross-site scripting attacks and disclose sensitive information.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/35073/sa13201.txt
Source: https://packetstormsecurity.com/files/35073/Secunia-Security-Advisory-13201.html