Stored XSS in topics because of whitelisted_generic engine vulnerability

**Steps to reproduce:** 1. Paste this payload URL in the topic: http://89.223.28.48/og_image.html?uncache1234 2. Save the post and you will see the XSS will fire {F151911}