Not sure if $taboo was getting sanitized or not. Possibly an SQL injection vulnerability that allows maliciously crafted group names to inject SQL at a later date when the group CP is loaded. Unconfirmed, theoretical fix.
+ âËÃÆâ€ÃÂÃÃ†â€™Ãƒâ€ ’‚¢ÃƒÂ¢Ã¢â€šÂ¬Ã…¾Ã‚¢ÃƒÆ’ƒâ€ Ã¢â‚¬â„¢ÃƒÆ’†â€™Ãƒâ€šÃ‚¢ÃƒÂ¢Ã¢â‚¬Å¡Ã‚¬Ã‚ ÃƒÂ¢Ã¢ââ‚ÃâÃÂÃÆÃ¢â‚¬â„¢ÃƒÆ’¢â‚¬Å¡Ãƒâ€šÃ‚¢ÃƒÆ’ƒÂ¢Ã¢â€šÂ¬Ã…¡Ã‚¬Ã…¡Ãƒâ€šÃ‚¬ÃƒÆ’…¡Ã‚¬Ã¢â€žÂ¢ (binary:image/gif)