Skype XSS vulnerability

Skype 5.3.0.120 suffers from a persistent Cross-Site Scripting vulnerability due to a lack of input validation and output sanitization of the "mobile phone" profile entry. Other input fields may also be affected.

An attacker could trivially hijack session IDs of remote users and leverage the vulnerability to increase the attack vector to the underlying software and operating system of the victim.