Users could be tricked into running arbitrary code, but the issue was patched last week.
You might not have to start all over again.