NHS Website XSS Blunder

Read this on theregister.co.uk, quit disgusting how a government website is vulnerable to Cross Site Scripting, but when some poor guy tries to help...he gets nowhere and in desperation posts on a forum !