Critial XSS flaws in Magento leave millions of ecommerce sites at risk – Naked Security

https://nakedsecurity.sophos.com/2016/01/25/critial-xss-flaws-in-magento-leave-millions-of-ecommerce-sites-at-risk/