Unfixed XSS vulnerability at www.pic.to

Security researcher Woo, has submitted on 01/04/2009 a cross-site-scripting XSS vulnerability affecting www.pic.to, which at the time of submission ranked 27600 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 21/11/2011. It is currently unfixed...