Information from Let's PHP!

Vulnerability ID:JVN#42262137
Title:simple chat vulnerable to cross-site scripting
Status:Vulnerable

This is a statement from the vendor itself with no modification by JPCERT/CC.