e-bikeshop.co.uk XSS vulnerability

e-bikeshop.co.uk XSS vulnerability in Custom Code application with CVSSv3 score of 6.1. Coordinated disclosure based on ISO 29147 guidelines. Remediation guide: OWASP XSS Prevention Cheat Sheet. Vulnerable URL: https://www.e-bikeshop.co.uk/search?search=%22%3E%27%3EI%3Ci%3EI%3Csvg%2Fonload%3Dalert%28%2Fopenbugbounty%2F%29%3E. Coordinated disclosure timeline: Reported on 12 February, 2018 (11:52 GMT), verified and operator notified on 12 February, 2018 (12:06 GMT). Published without technical details on 12 February, 2018 (12:06 GMT). Fixed on 31 March, 2018 (09:25 GMT). Public disclosure on 31 March, 2018 (09:25 GMT)