Not sure if $taboo was getting sanitized or not. Possibly an SQL injection vulnerability that allows maliciously crafted group names to inject SQL at a later date when the group CP is loaded. Unconfirmed, theoretical fix.

     1

/* CSS file for table dialog in the table plugin */

     2

     3

.panel_wrapper div.current {

     4

	height: 220px;

     5

}

     6

     7

.advfield {

     8

	width: 200px;

     9

}

    10

    11

#class {

    12

	width: 150px;

    13

}