Many of those gadgets, Sutton has discovered, are vulnerable to "cross-site scripting, " a technique that could allow a hacker to impersonate a legitimate user.

FORBES: Magazine Article