There is a security issue that the profile information is not escaped. I can include HTML which is a bad thing. Suggested Fix, use HTMLEditFormat(Field, -1) when you output the data.
Log in to post a comment.