📎 AI Summary:
The thread discusses a reported cross-site scripting/code-injection vulnerability in Skype’s VoIP client tied to inadequate input validation and output sanitization of profile fields (home, office, mobile), with skepticism from Skype about its severity and claims that it only affects text appearance. The key question raised is whether the flaw can be exploited beyond cosmetic changes, referencing similar issues found in other instant-messaging clients. Overall sentiment appears cautious/critical toward the vendor’s minimization and leaning toward treating it as a potentially real security risk.
The thread discusses a reported cross-site scripting/code-injection vulnerability in Skype’s VoIP client tied to inadequate input validation and output sanitization of profile fields (home, office, mobile), with skepticism from Skype about its severity and claims that it only affects text appearance. The key question raised is whether the flaw can be exploited beyond cosmetic changes, referencing similar issues found in other instant-messaging clients. Overall sentiment appears cautious/critical toward the vendor’s minimization and leaning toward treating it as a potentially real security risk.
