Around 1,500 popular websites have been compromised due to users passing on a cross-site scripting attack.