Not sure if $taboo was getting sanitized or not. Possibly an SQL injection vulnerability that allows maliciously crafted group names to inject SQL at a later date when the group CP is loaded. Unconfirmed, theoretical fix.
#frmbody {
padding: 10px;
background-color: #FFF;
border: 1px solid #CCC;
}
.frmRow {
margin-bottom: 10px;
}
#templatesrc {
border: none;
width: 320px;
height: 240px;
}
.title {
padding-bottom: 5px;
}
.mceActionPanel {
padding-top: 5px;
}