XSS in Yandex Browser BookReader in Yandex browser for desktop for versions before 16.6. could be used by remote attacker for evaluation arbitrary javascript code.Referenceshttp://www.securityfocus.com/bid/93925https://browser.yandex.com/security/changelogs/