WoltLab Burning Board 2.3.5(WBB) in XSS

Hi WBB in XSS We aren't able to bite from the Avatar ,But attachment.php With xss code are able to bite. HEX editor With GIF picture Open , JS code are writing. GIF89a
jscode Js Code:Hex:...