Simple Public Chat Room version 1.0 suffers from an authenticated persistent cross site scripting vulnerability.