PHP-Fusion allows remote attackers to inject arbitrary Cascading Style Sheets (CSS) via the BBCode color tag.Referenceshttp://www.securityfocus.com/bid/14332http://www.osvdb.org/18111http://secunia.com/advisories/16096
