vBulletin version 4.2.5 with Advanced User Tagging version 3.1.3 suffers from an open redirection vulnerability.