Question2Answer version 1.7 suffers from a persistent cross site scripting vulnerability.