Multiple cross-site scripting (XSS) vulnerabilities in Adrenalin's ASP Chat allow remote attackers to inject arbitrary web script or HTML (1) via the psuedo (pseudo) field or (2) during chat.
https://exchange.xforce.ibmcloud.com/vulnerabilities/32203
http://www.securityfocus.com/bid/22392
http://www.securityfocus.com/archive/1/459144/100/0/threaded