macOS HelpViewer XSS / Arbitrary File Execution / Read

Cross site scripting on macOS HelpViewer leads to arbitrary file execution and arbitrary file read.