Description vBSeo before 3.6.0PL2 allows XSS via the member.php u parameter. References https://www.exploit-db.com/exploits/37944 https://www.securityfocus.com/bid/55908