The cross-site scripting flaw could enable arbitrary code execution, information disclosure - and even account takeover. Via Vulnerabilities – Threatpost https://threatpost.com