The injected script illustrates how the presence of a cross-site scripting vulnerability combined with sensitive information stored in the DOM can allow an attacker to steal sensitive data.