Investors Application suffered from a client-side script insertion vulnerability. Continue reading...