Mail.ru: Stored XSS on store.my.games

Stored XSS in comment viewing functionality on store.my.games...

Mail.ru: DOM based XSS via postMessage at store.my.games

mailru.core.js as used by GMR/store.my.games application was vulnerable to XSS via PostMessage handler...