If you have a tag
then clicking edit tags on the post list produces strange output
you can copy this post to test http://www.biblicious.org/user/jil/xss
escaped the output with a <c:out />, hope that was right....
Issue #2492 was marked as a duplicate of this issue.