Possible bug with the recent XSS patch.

I believe the patch included one file which was something like view message for the pcadmin folder. I tried to consolidate a customer account and the message came up like this:

The email you have chosen is already in use by another customer. If you still wish to use this e-mail for this customer account, <a href=''viewcustb.asp?key4=customeremail@address.com''>search</a> for all customers with the same e-mail address, consolidate their accounts into one using the corresponding feature (orders are moved to the consolidated account), and then remove the accounts that are no longer needed.

So the URL isn't correctly appearing. Is anyone else experiencing this error?

Edited by Brett - 14-June-2011 at 10:26pm

We posted the updated patch.
http://www.earlyimpact.com/productcart/technical-support.asp#updates

Thank you for pointing out the issue with the way the fix was affecting the display of certain Control Panel messages.


Edited by earlyimp - 15-June-2011 at 6:28pm