The vulnerability allowed attackers to silently install malicious browser mods that used CSS injection to reconstruct user email addresses from…