Cryptocat before 2.0.22: cryptocat.js handlePresence() has cross site scriptingReferenceshttps://www.openwall.com/lists/oss-security/2013/07/10/15https://tobtu.com/decryptocat.phphttps://vuldb.com/?id.9442https://www.securityfocus.com/bid/61096
