EIP-2026-104080

The provided text describes an HTML injection vulnerability in Skype versions 5.3.0.120 and prior, where user-supplied input is not properly sanitized, allowing attacker-supplied HTML and script code to execute in the context of the affected browser. The example payload demonstrates a simple XSS attack using an iframe with an onload event.