It seems all versions of WHMCS have been affected by an XSS bug. They haven’t provided much details, but it is probably a good idea to update your WHMCS: