Xenforo cross-site scripting vulnerabilities

Xenforo is a forum software from Xenforo, Inc. A cross-site scripting vulnerability exists in Xenforo version 2.2.13, which stems from improper cleaning of the smilie category header parameter and could lead to a stored cross-site scripting attack...