Code injection

In Joomla! 1.6.0 through 3.6.5 fixed in 3.7.0, inadequate filtering of form contents allows overwriting the author of an article...