Cross-site scripting (XSS) vulnerability in index.php for Quick.Forum 2.1.6 allows remote attackers to inject arbitrary web script or HTML via the topic field in a NewTopic action.Referenceshttp://www.securityfocus.com/bid/13602http://secunia.com/advisories/15200http://www.osvdb.org/16327http://lostmon.blogspot.com/2005/05/quickforum-topic-field-xss-and-page.html