XSS and phpBB

Well, even though for some reason I can not replicate this, I am playing it safe and disabling BBCode for the time being.