griffon-shinsho.gamerch.com XSS vulnerability

Griffon-shinsho.gamerch.com XSS vulnerability - Open Bug Bounty ID: OBB-647289. Affected website: griffon-shinsho.gamerch.com. Vulnerable application: Custom Code. Vulnerability type: XSS (Cross Site Scripting) / CWE-79. CVSSv3 Score: 6.1. Remediation Guide: OWASP XSS Prevention Cheat Sheet. Vulnerable URL: https://griffon-shinsho.gamerch.com/gamerch/external_link/?url=%3Csvg%20onload=alert(%27OPENBUGBOUNTY%27)%3E. Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines. Disclosure Timeline: Reported - 14 July, 2018 07:47 GMT. Verified - 14 July, 2018 07:57 GMT. Website Operator Notified - 14 July, 2018 07:57 GMT. Public Report Published - 14 July, 2018 07:57 GMT. Public Disclosure: 12 October, 2018 07:47 GM