It was reported that: “A security consultant has notified Skype of a cross-site scripting flaw that could be used to change the password on someone’s account, according to details posted online. The consultant, Levent Kayan, based in Berlin, posted details of the flaw on his blog on Wednesday and notified Skype a day later. He said on Friday he hasn’t heard a response yet. The problem lies in a field where a person can input their mobile phone number. Kayan wrote that a malicious user can insert JavaScript into the mobile phone field of their profile.”

Skype has confirmed the flaw, but calls it ‘minor,’ saying it only affects people who communicate with a potential attacker on a regular basis. A fix is planned for next week.