Unfixed XSS vulnerability at www.cfd.fr

Security researcher strepo, has submitted on 29/12/2011 a cross-site-scripting XSS vulnerability affecting www.cfd.fr, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/12/2011. It is currently unfixed...