JVN#30864198: ArsenoL vulnerable to cross-site scripting

ArsenoL provided by FlaFla… is software that can be downloaded from the Internet. ArsenoL is a dictionay software that is placed on a website used to post words and their meanings. ArsenoL contains a cross-site scripting vulnerability (CWE-79) where an arbitrary script may be executed when the victim accesses a malicious page created by an attacker.

Impact

Due to this vulnerability, a victim being tricked into accessing a malicious link may have the webpage display altered or Cookie information in the victim’s web browser may be leaked.

Solution

Consider stop using ArsenoL Version 0.5
Since the developer was unreachable, existence of any mitigations are unknown.