Lemmy.world Defaced (lemmy.world)

Right now, lemmy.world seems to be switching between "Site has been seized by Reddit for copyright infringment" and a tasteless mp4

Its just down for me.

Archived defaced version: https://archive.is/wbQ2f

[flagged]

XSS vuln apparently: https://lemmy.ml/post/1896249

For anyone wondering, this was the fix for the vulnerability that allowed people to gain access: https://github.com/LemmyNet/lemmy-ui/pull/1897/files

Looks like it was related to https://news.ycombinator.com/item?id=36664097. Absolutely ridiculous that the XSS vulnerability wasn't responsibly disclosed.