LearnVest suffers from a persistent cross site scripting vulnerability. The author has emailed the vendor repeatedly with no response.