Cryptocat versions prior to 2.0.22 are vulnerability to a script injection vulnerability. Continue reading...