Skype zero day HTML/(Javascript) code injection POC.
Fresh from the oven, a Zero Day of Skype has been published, affecting the version on the Windows XP, Vista, 7 platform. This failure implies that a user with bad intentions can define a malicious code in some of its fields, and when reading this information, the victim’s application will interpret it.
To check the veracity of this failure, you can include the following code in the different sections, and as you can see, the application itself recognizes the tags that the malicious user has inserted.