Unfixed XSS vulnerability at ga1.org

Security researcher PaPPy, has submitted on 23/05/2008 a cross-site-scripting XSS vulnerability affecting ga1.org, which at the time of submission ranked 167136 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/05/2008. It is currently unfixed...