iTunes and App Store vulnerable to script injection

Apple is in the middle of patching a rather dangerous vulnerability in iTunes and the App Store that can be easily exploited.