CVE-2012-1410

Multiple cross-site scripting (XSS) vulnerabilities in the History Window
implementation in Kadu 0.9.0 through 0.11.0 allow remote attackers to
inject arbitrary web script or HTML via a crafted (1) SMS message, (2)
presence message, or (3) status description.

Bugs

• <https://bugzilla.redhat.com/show_bug.cgi?id=797777&gt;
• <https://bugzilla.novell.com/show_bug.cgi?id=749036&gt;