All PCPIN Chat 6 versions prior to 6.11 are affected by the potential XSS vulnerability in URL redirection script. The vulnerability is caused by insufficient protocol scheme validation in file /inc/url_redirection.inc.php
More info and patch here: http://community.pcpin.com/?include=700&thread_id=6918
