Re: [ CWE-79 ] *.nastyfans.org is vulnerable to script injection
It seems that I lack knowledge about this, can you explain it more clearly? How can that be? Something called coerce? It is really difficult to force someone to do what the attacker wants, unless they have tricks to cover the user's eyes. Right? 
It's all explained in great detail here.
That's a decent explanation but I prefer this one. You have to listen to at least 40 seconds of it to get its full implication.