07-04-2014
XSS exploit removed. thx to sergey