Secunia

A vulnerability has been reported in BirdBlog, which potentially can be exploited by malicious people to conduct script insertion attacks.

Input passed in BB code isn't properly sanitised before being used. This may be exploited to inject arbitrary JavaScript code, which will be executed in a user's browser session in context of an affected site when the malicious user data is viewed.

The vulnerability has been reported in version 1.3.0. Prior versions may also be affected.

NOTE: This was originally fixed in version 1.3.1. However, it is reportedly potentially possible to bypass the fix via exploitation in the "[url]" tag.

Solution
Update to version 1.3.3.
Further details available in Customer Area

Provided and/or discovered by
Reported by vendor.

Changelog
Further details available in Customer Area

Deep Links
Links available in Customer Area