Apply this fix to make sure your protected. I dont see this being a problem with this hack but I decided to add this in to be a little more on the safe side. It always better to be safe then sorry.
Open functions_newpost.php
Find:
PHP Code:
// ### POST NEW THREAD ###
if ($type == 'thread')
{
Add Below:
PHP Code:
$post['threadtype'] = htmlspecialchars_uni(fetch_censored_text($post['threadtype']));
I will update the two install files to have this new change in v1.0.1. The only change will be this security update.