Unfixed XSS vulnerability at www2.lancome.com

Security researcher MaXWeL, has submitted on 24/05/2007 a cross-site-scripting XSS vulnerability affecting www2.lancome.com, which at the time of submission ranked 25950 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 24/05/2007. It is currentl...