Fusetalk forum 4.0 is susceptible to a cross site scripting flaw due to a lack of filtering img tags.