The high-severity flaw allows malicious code injection into website pop-up windows.
Source: Threadpost