Cross-site scripting (XSS) vulnerability in MyBB before 1.6.15 allows remote attackers to inject arbitrary web script or HTML via vectors related to video MyCode.Referenceshttp://secunia.com/advisories/59707http://blog.mybb.com/2014/08/04/mybb-1-6-15-released-security-maintenance-release
