In one click: Amazon Alexa could be exploited for theft of voice history, PII, skill tampering

Subdomains belonging to the service were found to be harboring CORS errors and vulnerable to XSS attacks.