Attackers targeted websites created with Power Pages. Malicious code could have slipped through the Bing vulnerability.