Cross-site Scripting (XSS)

pym.js is vulnerable to cross-site request forgery CSRF attacks. Attackers can embed malicious JavaScript code into document.location.href objects...