XSS vulnerability in unmaintained JavaScript library poses severe risk | Hacker News Reader