1. 2014-10-16 [FD] New York Times nytimes.com Page Design XSS Vulnerability (Almost al full-disclos Jing Wang