Yahoo Serialize JavaScript cross-site scripting vulnerability

Versions of Yahoo Serialize JavaScript prior to 7.1.3 contain a cross-site scripting vulnerability. This flaw arises because the function’s source code escaping logic fails to neutralize the bare closing script prefix. Attackers can forge the toString control to end the serialized function’s sour...