Hi Everyone! I Just found more XSS at "Invision Power Board v1.3 Final" forum. This is the new hole: http:///forum//index.php?s=&act=chat&pop=1;'> it is at the "pop" field. Rafel Ivgi, The-Insider.