GD bbPress versions 2.5 and below suffer from a cross site scripting vulnerability. Continue reading...