Could this be true?  Apparently using XSS redirected users to Hilary Clinton’s site, still it could have been worse by forcing malware onto user’s computers.  Bloody cheeky though, hey?