Can someone explain the “Covert Redirect” vulnerability in OAuth and OpenID?(security.stackexchange.com)

http://security.stackexchange.com/questions/57143/can-someone-explain-the-covert-redirect-vulnerability-in-oauth-and-openid