Xiuno BBS Cross-Site Scripting Vulnerability

Xiuno BBS is an open source forum program based on PHP and MySQL. A security vulnerability exists in Xiuno BBS version 4.0.4, which can be exploited by remote attackers to execute arbitrary web script or HTML via the attachment upload function...