New Vulnerability in Popular Widget Shows Risks of Third-Party Code

Successful exploitation of this vulnerability could allow malicious actors to impersonate a user and take over a user’s account, perform any action on behalf of the user and or steal sensitive information such as cookies and session tokens.