= 1.5
NexusPHP V1.5 has XSS via a javascript: or data: URL in a UBBCode url tag.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.