Uh... it PARTIALLY works.
If I use the code <img src="/media/images/xxx.gif"> it works.
If I use <img src="/media/images/xxx.gif" style="margin-top: 4px;"> I get a break security email:
Total impact: 24
Affected tags: xss, csrf, id, rfe, lfi
Variable: REQUEST.Caption | Value: <img src="/media/images/xxx.gif" />
Impact: 12 | Tags: xss, csrf, id, rfe, lfi
Description: finds html breaking injections including whitespace attacks | Tags: xss, csrf | ID: 1
Description: Detects possibly malicious html elements including some attributes | Tags: xss, csrf, id, rfe, lfi | ID: 38
Description: finds attribute breaking injections including obfuscated attributes | Tags: xss, csrf | ID: 68
Variable: POST.Caption | Value: <img src="/media/images/xxx.gif" />
Impact: 12 | Tags: xss, csrf, id, rfe, lfi
Description: finds html breaking injections including whitespace attacks | Tags: xss, csrf | ID: 1
Description: Detects possibly malicious html elements including some attributes | Tags: xss, csrf, id, rfe, lfi | ID: 38
Description: finds attribute breaking injections including obfuscated attributes | Tags: xss, csrf | ID: 68
REMOTE_ADDR: 93.37.152.80
What can I do?