Stack Overflow should feel embarrassed for this. Blatant XSS attack, script tags included. User credentials could have easily been stolen as a result of this.

Stack Overflow should feel embarrassed for this. Blatant XSS attack, script tags included. User credentials could have easily been stolen as a result of this. I hope they force invalidate all sessions as a precaution instead of trying to brush this under the rug.