A password to an individual's CNN account could easily be their same login to their bank or other more important account.

My guess would be to see what people are typing but not submitting, along with what they're searching for, commenting, etc.

CNN staff and contributors could be the target.

People can buy ads and place their own JS in them I'm guessing... This might go beyond just CNN.