CVE-2006-2670: Multiple cross-site scripting (XSS) vulnerabilities in ChatPat 1.0 allow remote attackers to inject arbitrary web script

ChatPat version 1.0 contains multiple cross-site scripting (XSS, where attackers inject malicious scripts into web pages) vulnerabilities in two PHP files that allow attackers to inject harmful code through chat messages. The vulnerability affects the fastchat.php and fastshow.php files in the application.