Multiple Facebook script insertion vulnerabilities have been recently discovered.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/67964/facebook-inject.txt
Source: https://packetstormsecurity.com/files/67964/facebook-inject.txt.html