The recent chat feature that was added recently has a XSS flaw in it. For testing purpose, I created a chat room called
<b>123</b> and as you can see in the screenshot below, the
<b> tags weren't escaped.
Nice catch. I guess someone owes you a beer next time you meet in