BlinkSale suffered from a malicious script insertion vulnerability that affects the mail functionality client-side.