Vimeo: XSS in Subtitles of Vimeo Flash Player and Hubnut

XSS is Subtitles of flash player and hubnut...

Vimeo: Stored XSS on vimeo.com and player.vimeo.com

Description You can share your uploaded videos using the widget Hubnut. The URL is something like https://player.vimeo.com/hubnut/user/user36690798/uploadedvideos?color=44bbff&background=000000&slideshow=0&videotitle=1&videobyline=1, and I noticed that the same content is loaded for this URL...