Crossit scripting, user accounts editing, code execution.
vulners.com/securityvulns/securityvulns:doc:7707