Patched versions of forumdisplay.php and showthread.php are now available to fix 2 potential XSS issues in RC4.
These issues are likely in all versions of 3.0.0 to this point.
The updated files are not available in the members' area at this time, so please download them from this post.
http://www.vbulletin.com/forum/showt...070#post630070