≤ 3.3.0
bbs-go <= 3.3.0 including Custom Edition is vulnerable to stored XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.