Is CVE-2022-3963 actively exploited?

No active exploitation of CVE-2022-3963 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2022-3963 be exploited remotely?

Yes. CVE-2022-3963 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2022-3963?

CVE-2022-3963 has a CVSS score of 5.4 (MEDIUM).

HOME VULNERABILITIESCVE-2022-3963

MEDIUM

CVE-2022-3963

CWE-707Published: November 12, 2022· Updated: Jun 17, 2026

5.4

CVSS v3.1

Official Description

A vulnerability was found in gnuboard5. It has been classified as problematic. Affected is an unknown function of the file bbs/faq.php of the component FAQ Key ID Handler. The manipulation of the argument fm_id leads to cross site scripting. It is possible to launch the attack remotely. Upgrading to version 5.5.8.2.1 is able to address this issue. The name of the patch is ba062ca5b62809106d5a2f7df942ffcb44ecb5a9. It is recommended to upgrade the affected component. The identifier of this vulnerability is VDB-213540.

NVD Source

Technical Analysis

CVE-2022-3963 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

Exploitation requires low privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

The vulnerability has a "Changed" scope, meaning successful exploitation can impact components beyond the vulnerable component itself — such as the host operating system or adjacent services.