Codoforum version 4.8.3 suffers from a persistent cross site scripting vulnerability under the topic additions.