An issue was discovered in Bilboplanet 2.0. Stored XSS exists in the fullname parameter to signup.php.Referenceshttps://www.exploit-db.com/exploits/34089/