MyBB (FWS Mod) reflected XSS

MyBB FWS Mod reflected XSS Mod Name: Forum Warning System http://community.mybboard.net/attachment.php?aid=6814 Vulnerable piece of code: //USERCP AND PM CHANGES elseif$file == "usercp.php" || $file == "private.php" iffunctionexists"imagecreatefrompng" && $mybb-user'fwswarnings' != 0...