Unfixed XSS vulnerability at www.crocs.com

Security researcher tenest, has submitted on 21/08/2009 a cross-site-scripting XSS vulnerability affecting www.crocs.com, which at the time of submission ranked 10001 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...