Not necessarily. If a Javascript vulnerability exists, they can steal the password you type before it even reaches the database (long before the salting and hashing steps).