= 1.5.1
In MyT 1.5.1, the User[username] parameter has XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.