I will post a report here as soon as the issue is resolved. Basically it is plain XSS and one more thing so nothing overwhelmingly critical for them to fix.