Description NexusPHP V1.5 has XSS via a javascript: or data: URL in a UBBCode url tag. References http://118.89.230.52/about/details.docx