Unfixed XSS vulnerability at www.carbofastdirect.com

Security researcher IrIsT.Ir, has submitted on 29/12/2011 a cross-site-scripting XSS vulnerability affecting www.carbofastdirect.com, which at the time of submission ranked 14005796 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/12/2011. It...