No licensed User....but I have to say something in private
 

I'm not a owner of a license, but a co-worker on a vbulletin-based community, so I cannot use the ticket-system.
I think I stumbled across a critical XSS-issue inside the CMS.
We currently use vbulletin 4.0.6

To eliminate external Products as reason I checked the issue inside the vbulletin-demo, it also exist's there.
Is there any employee which want's to hear, I think it's no good idea to post it inside the forum ;)

greets mollinghuber