fleur.kiev.ua XSS vulnerability

Vulnerable URL: http://www.fleur.kiev.ua/ru/news.php?year=updatexml%280,repeat%28user%28%29,2%29,2%29=%27%3Cscript%3Ealert%28/XSSPOSED/%29%3C/script%3E%27 Details: Description| Value ---|--- Patched:| Yes, at 23.11.2017 Latest check for patch:| 23.11.2017 20:47 GMT Vulnerability type:| XSS...