We're on heise.de [German] found 160 Sites Vulnerable to XSS

Dear readers,

we recently found 160 sites of the german finance system vulnerable to reflected cross site scripting. We sent the information the well known IT-News site heise.de And they sent it to the CERT Team Bund (Computer Emergency Response Team)

http://www.heise.de/security/meldung/Viele-Finanzaemter-mit-unsicheren-Websites-2039317.html