*vBulletin 3.7.4 PL1* An XSS flaw within the user control panel has recently been discovered. This could allow an attacker to carry out an action as a user or obtain access to a user's account....

More...