Design/Logic Flaw

The Add page option in my little forum 2.4.12 allows XSS via the Menu Link field...