CVE-2009-0934
Cross-site scripting (XSS) vulnerability in ejabberd before 2.0.4 allows remote attackers to inject arbitrary web script or HTML via unknown vectors related to links and MUC logs.
Date published : 2009-03-17
http://www.securityfocus.com/bid/34133
http://www.process-one.net/en/ejabberd/release_notes/release_note_ejabberd_204