A flaw in software widely used to power online discussion sites could allow ******* to harvest personal data, the BBC learns.

source