https://tsecurity.de/de/1159132/IT+Reverse+Engineering/Sicherheitsl%C3%BCcken/MyBB+up+to+1.8.20+Private+Message+BBcode+Persistent+cross+site+scripting/