Response from anticaptcha services is not validated resulting in XSS, which leads to full control of your browser by Anti-Captcha.com/RuCaptcha.com/2captcha.com/DEATHbyCAPTCHA.com/ImageTyperz.com/BestCaptchaSolver.com. Details are here: https://thesamarkand.tumblr.com/