I have a very open ended question. Are there any security concerns with being able to run javascript from anywhere on any website?

What I mean is, let's say you go to any webpage, and after it loads you load your own JS on the fly that can be customized and can manipulate the DOM of the current page. Could that do any harm?

Thanks in advance.