WoltLab Burning Board <= 2.3.1 PL2 - XSS Vulnerability
Vendor: WoltLab URL: http://www.woltlab.de/ Version: <= 2.3.1 PL 2 Type: XSS
Discovered by [R] and deluxe89
The WoltLab Burning Board is a high customisable forum software for every kind of use.
See  for a detailed description.
It's possible to inject malicious code in the "folderid"-variable in pms.php.
There isn't a patch from the vendor, but you can use htmlspecialchars() to fix it.
Vendor contacted. Greetz to 2lm, reddi, EaTh, Madinfect and darkkilla