`<?php echo OC_User::getDisplayName()?' ('.OC_User::getDisplayName().') ':'' ?>``

Reflected XSS!