Yahoo Serialize JavaScript cross-site scripting vulnerability

Yahoo Serialize JavaScript versions prior to 7.0.1 through 7.1.3 contain a cross-site scripting vulnerability. This vulnerability arises because the source text of the serialization function ends with an unescaped . Attackers can manipulate the source text by forging the toString control function...