Easy Forum New User Image File HTML Injection Vulnerability
The vendor has re-released version 2.5 with a fix included, and has also released a patch to address this issue.
Easy Forum Easy Forum 2.5
Easy Forum 'security' fix
Copyright 2010, SecurityFocus