Unfixed XSS vulnerability at www.avery.com

Security researcher Michael Ansel, has submitted on 23/04/2008 a cross-site-scripting XSS vulnerability affecting www.avery.com, which at the time of submission ranked 14808 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 23/04/2008. It is...