Cross-site scripting enabled on 1000 major sites – including financial sites | Heykuki News