This webpage fails to properly validate and encode user-supplied data. Users can add their own HTML and scripts to the page. See if you can display your session cookie in a dialog box.