Unfixed XSS vulnerability at nhfa.net

Security researcher m4x, has submitted on 04/04/2009 a cross-site-scripting XSS vulnerability affecting nhfa.net, which at the time of submission ranked 3042270 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 27/05/2009. It is currently unfixed...