Since animated avatars don't work with Xenforo (out of box anyways), is there still a security risk associated with allowing users to upload avatars? Can uploaded avatars still execute a payload on the server which would compromise security?
