Pornhub: XSS via JavaScript evaluation of an attacker controlled resource at www.pornhub.com

The researcher was able to execute arbitrary JavaScript code within the scope of the target domain by exploiting a reflected cross-site scripting vulnerability in a custom library...