*vBulletin 3.8.4 PL1 / 3.7.6 PL1 / 3.6.12 PL2* An XSS flaw within the user profile page has recently been discovered. This could allow an attacker to carry out an action as a user or obtain...

More...