LinkedIn Autofill flaw lets hackers harvest website visitors’ personal info

Click here to visit Original posting

If the visitor clicks anywhere on the page, then according to Cable, "LinkedIn interprets this as the AutoFill button being pressed, and sends the information via postMessage to the malicious site".