One of the most most popular blog resources in internet - Livejournal.com is vulnerable to XSS attack. Linked XSS vulnerability founded by by DSecRG researchers could be exploited through anonymous comments. XSS is possible because of absence of URI DATA type filtration and special processing of anonymous comments.
Vulnerability is fixed now. Details can be found in official advisory.
