Unfixed XSS vulnerability at deriva.org

Security researcher orange, has submitted on 21/11/2010 a cross-site-scripting XSS vulnerability affecting deriva.org, which at the time of submission ranked 26078347 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 13/12/2011. It is currently...