Translations:DOM-based XSS/7/en

If the page is loaded with the '$1' parameter set to '$2' instead of the intended language string, then the extra script will be added into the page's DOM and executed as the page is loaded.