Invision Community IPS Community Suite before 4.5.4.2 allows XSS during the quoting of a post or comment.