rubawaytheday.com XSS vulnerability

rubawaytheday.com XSS vulnerability, Open Bug Bounty ID: OBB-524098. Custom code application with XSS (Cross Site Scripting) vulnerability, CVSSv3 Score: 6.1. Coordinated disclosure based on ISO 29147. Remediation guide: OWASP XSS Prevention Cheat Sheet. Vulnerable URL: http://www.rubawaytheday.com/contact.php?info=Elite+Membership%22%3E%3Cdetails/open/ontoggle=confirm`openbugbounty`%3E. Coordinated disclosure timeline: Vulnerability reported on 15 January, 2018 14:03 GMT, verified on 16 January, 2018 09:19 GMT. Website operator notified on 16 January, 2018 09:19 GMT. Public disclosure on 15 April, 2018 14:03 GMT.