abracadabra.ibookingpms.com.br XSS vulnerability

abracadabra.ibookingpms.com.br XSS vulnerability. Open Bug Bounty Program, Vulnerable Application: Custom Code, Vulnerability Type: XSS (Cross Site Scripting) / CWE-79, CVSSv3 Score: 6.1, Coordinated Disclosure based on ISO 29147 guidelines, Remediation Guide: OWASP XSS Prevention Cheat Sheet, Vulnerable URL: https://abracadabra.ibookingpms.com.br/motor-de-reservas/?periodo1=%3C/script%3E%22%3E%3Cscript%3Eprompt(1)%3C/script%3E, Disclosure Timeline: Reported 26 January, 2018 19:49 GMT, Verified 26 January, 2018 20:04 GMT, Operator Notified 26 January, 2018 20:04 GMT, Public Report Published without technical details 26 January, 2018 20:04 GMT, Public Disclosure 26 April, 2018 19:49 GM