XSS vulnerability at login page

Preconditions: Open http://qa.jtalks.org/jcommune/login

1. In username field enter "><script>alert("hi")</script>
2. Enter 123456 in password field
3. Press Sign in/Войти/Увiйти

Actual result: alert window pops-up
Expected result: no pop-up window is shown; error "Your login attempt was not successful, try again" appears

Video: http://www.screencast.com/t/vbUad7wI1lw