= 4
sz.chat version 4 allows injection of web scripts and HTML in the message box.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.