Unfixed XSS vulnerability at search.ulta.com

Security researcher PaPPy, has submitted on 19/06/2008 a cross-site-scripting XSS vulnerability affecting search.ulta.com, which at the time of submission ranked 25425 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 07/07/2008. It is currently...