Invision Community IPS Community Suite before 4.5.4.2 allows XSS during the quoting of a post or comment.Referenceshttps://invisioncommunity.com/release-notes/