Drupal version 8.0.x-dev suffers from a cross site scripting vulnerability on IE8 and older versions. Continue reading...