New York Time vulnerability Leak

hello every body this Y.M.el (From Egypt)
1- i want to tell everybody that um not black hat hacker
2- um very strict to be white hat hacker as i love to follow legal rules and my job is report a web vulnerabilities to website even this website didn't have bug bounty for more secure world

And one of the last activities is discovering a vulnerabilities in """ New York Times """ http://www.nytimes.com

and this one this vulnerabilities is Cross Site Scripting
proof
http://postimg.org/image/7dlwtv283/

Vulnerable link
http://www.nytimes.com/top/features/travel/destinations/unitedstates/newyork/newyorkcity/hotel_listings.html?kw=1%253CScRiPt%2520%253Eprompt(100000)%253C%2fsCripT%253E

Why i report that because they don't care about security so i hope to care about that and that is only 1 vulnerability and there others

i post that because i want to open there minds or they going to be hacked in that time they will care and the strange thing they have been attacked many times and still out of the world

for me i didn't exploit and i will never exploit or leak data as i um white hat hacker