CVE-2013-7467: Improper Neutralization of Input During Web Page Generation

Simple Machines Forum SMF 2.0.4 allows XSS via the index.php?action=pm;sa=settings;save sa parameter...