XSS vulnerability in unmaintained JavaScript library poses severe risk | Dark Hacker News