There is a Permanent-type Cross-Site Vulnerability in ?Personal Signature? in all version of Discuz!. It can be written by the worm!

Security Focus