It was found in vanilla forums prior to 2.0.10 a potential linkbait vulnerability in dispatcher.
vanillaforums vanilla forums