Unfixed XSS vulnerability at www.heattreatonline.com

Security researcher Jesse-James, has submitted on 25/03/2009 a cross-site-scripting XSS vulnerability affecting www.heattreatonline.com, which at the time of submission ranked 5014403 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. ...