Cryptocat prior to 2.0.22 has Arbitrary Code Execution on Firefox Conversation Overview
cryptocat project cryptocat