CVE-2017-1000035by Jeremyin Security Bulletinson Posted on July 17, 2017 Tiny Tiny RSS before 829d478f is vulnerable to XSS window.opener attack