code was injected into a few of my templates
 

Im currently running 3.8.6 patch level 1(getting patch level 3 now)

the following code was injected into "FORUMHOME" and "FORUMDISPLAY" on all the installed templates
Code:


Is there a known exploit in the version that I am/was running that would have enabled someone to add that code(causes popups)?