Cross site scripting

deleteaccount.php in the Delete Account plugin 1.4 for MyBB allows XSS via the deletereason parameter...