Various Alibaba sites suffer from cross site scripting and open redirect vulnerabilities.