Schwab financial site vulnerable to attack

CNet is reporting that the Schwab financial site has been aware of being vulnerable to a cross-site scripting attack since August but the vulnerability is still present.