Unfixed XSS vulnerability at www.surgedirect.com

Security researcher APS, has submitted on 22/08/2011 a cross-site-scripting XSS vulnerability affecting www.surgedirect.com, which at the time of submission ranked 6634 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 25/12/2011. It is currently...