To clarify, this exploit worked on all of Yahoo Mail sites, not just the mobile version, as mentioned in the first post of this topic. But thanks to Ronjor for merging it with this thread.