Custom User Title

[hornstar6969]

I wanted to remove someones sig the other day, went to the admincp

and I noticed that the

Custom User Title was set to - Yes Admin Set (Html allowed)

I was shocked as I have not allowed this to be on anyone and he was only a fairly new member.

I have since seen this on a few other people. Not sure why some are set to No and some are set to the Yes Admin Set


But is this a security problem. and how do I fix this from occuring.

Thanks

[Colin F]

As far as I know only Administrators would be able to set it to 'Yes - Admin Set'.

Do you have any code modifications, addons or plugins?

[hornstar6969]

The only one I can think of is vbplaza (used to be knows as estore)

Is this a security issue?

[Colin F]

Potentially, but I don't know how that's coded.