shicollections.org XSS vulnerability

shicollections.org XSS vulnerability. Vulnerable URL: http://shicollections.org/?p=core/contact&f;=email&referer;=%22--%3E%3C%2Fscript%3E%3Csvg%2Fonload%3D%27%3Balert%28%2Fxssposed%2F%29%3B%27%3E. Patched: No. Latest check for patch: 03.08.2017. Vulnerability type: XSS. Vulnerability status: Publicly disclosed. Alexa Rank: Unknown / Not calculated. VIP website status: No. Coordinated Disclosure Timeline: Vulnerability submitted via Open Bug Bounty: 25 June, 2017 02:43 GMT. Generic security notifications sent to website owner: 25 June, 2017 12:44 GMT. Notification sent to subscribers (without technical details): 25 June, 2017 14:17 GMT. Vulnerability details disclosed by researcher: 2 July, 2017 13:15 GM