The host is installed with Google Chrome before 21.0.1180.89 and is prone to a cross-site scripting vulnerability. A flaw is present in the application, which fails to handle a crafted web script. Successful exploitation could allow attackers to inject arbitrary web script or html.