phpMyFAQ 2.6.8 Cross Site Scripting

Hi, My name is Yam Mesicka, I'm from Israel and this is my first big disclosure so help needed is here :- I found XSS on phpMyFAQ system, versions 2.6.6 to 2.6.8. Dork: intitle:"Powered By phpMyFAQ 2.6.8" XSS: site-location/index.php/"alert"XSS" Vul: 2.6.6 = phpMyFAQ = 2.6.8 The problem has been...