An XSS vulnerability in Krpano was exploited to hijack 350+ websites, manipulating search results for spam ads. The latest update mitigates the risk.