Comment by dwedge

Local access is a bit of a misnomer though, a vulnerable website can be tricked into running a script