mybb/mybb — pull request #5 by Siprah (2013-01-24 11:53:25+00:00)
Title: XSS Injection vulnerabilities.

A vulnerabilities are in ACP's Usergroup module.
You can use scripts, meta etc. in Star Image's URL.
Moreover, you can do it also with Namestyle Username when you adding a
new group.
I fixed this.