it is possible to be executed I cosay arbitrary within the system wbnews in the field "Name" for example <script>alert("Hello DragoN");</script>

WBNews
http://www.webmobo.com/

DragoN
DragonJAR@gmail.com