e-Courier CMS Cross Site Scripting

`Vendor: e-Courier (http://www.ecouriersoftware.com/)  
Product: CMS Tracking Site Issue: Cross-Site Scripting.  
Description: Nearly all pages include the URI Parameter UserGUID,  
which is not sanitized before being included in the response.  
  
Example:  
https://demo.e-courier.com/demo/home/index.asp?UserGUID="><script>alert(document.cookie)</script>  
  
--   
  
BugsNotHugs  
Shared Vulnerability Disclosure Account  
  
`