policies.emory.edu XSS vulnerability

There is an XSS vulnerability on http://policies.emory.edu/2.8/2/x%22%3E%3CsvG%20onLoad=prompt%28/openbugbounty/%29%3E. Patched: No, Latest check for patch: 27.07.2017, Vulnerability type: XSS, Vulnerability status: Publicly disclosed, Alexa Rank: Unknown / Not calculated, VIP website status: No, Check policies.emory.edu SSL connection: (Grade: B-). Coordinated Disclosure Timeline: Vulnerability submitted via Open Bug Bounty on 19 September, 2016 18:21 GMT, Generic security notifications sent to website owner on 19 September, 2016 18:24 GMT, Vulnerability details disclosed by researcher on 17 October, 2016 19:19 GMT