Force the user to supply a password to change email or other important information might help, but this XSS vulnerability is still pretty bad as you can make al

Force the user to supply a password to change email or other important information might help, but this XSS vulnerability is still pretty bad as you can make all kinds of phishing-style attacks.