A vulnerability on the Con Edison (ConEd) website could put users at risk of account spoofing and data theft.......