XSS issues ....
 

Seems that on my forum ... every time someone tries to log in they get a weird pop up with a PDF file in there ... working to use some exploit

but when i update this always goes away,

how can i keep this from happening, it still does