### Title: Mail.Yahoo.Com Cross Site Scripting ### ### Vendor: Yahoo Mail ### ### Advisory Publication: 12-March-2015 ### ### Latest Update: 12-March-2015 ### ### Vulnerability Type: Cross-Site Scripting [ XSS ] ### CVE Reference: * ### ### CVSS Severity (version 2.0): ### ### Exploitability Subscore: 8.6 ### ### Credit: sleed @ Lucian I. ### *Status: Raported PoC: _______________