Secunia

A vulnerability has been reported in ChitChat.NET, which can be exploited by malicious people to conduct Cross-Site Scripting attacks against other users.

The vulnerability is caused due to missing validation of user input in the "Name" and "Topic Title" fields. This can be exploited by inserting script code, which is executed in a user's browser session when viewed.

Successful exploitation can result in disclosure of various information (eg. cookie-based authentication information) associated with the site running ChitChat.NET or inclusion of malicious content, which the user thinks is part of the real website.

The vulnerability has been reported in version 2.0. However, prior versions may also be affected.

Solution
Reportedly, a patch has been produced.
Further details available in Customer Area

Provided and/or discovered by
G00db0y (Zone-H)

Original Advisory
http://www.zone-h.org/en/advisories/read/id=2882/

Deep Links
Links available in Customer Area