< 2.0.22
2.0.22
Cryptocat before 2.0.22 has Nickname User Impersonation
Running one of these products? Scan your site to see whether it exposes a vulnerable version.