download-plaza.com XSS vulnerability

download-plaza.com XSS vulnerability, open bug bounty ID OBB-674514. Affected website: download-plaza.com. Vulnerable application: custom code. Vulnerability type: XSS (Cross Site Scripting) / CWE-79. CVSSv3 score: 6.1. Coordinated disclosure based on ISO 29147 guidelines. Remediation guide: OWASP XSS prevention cheat sheet. Vulnerable URL: https://download-plaza.com/download/Applicad+%3Cscript%3Ealert(%22Akalanka%20Was%20Here%22);%3C/script%3E+Wizard+Serial.html. Vulnerability reported: 9 September, 2018 04:45 GMT. Vulnerability verified: 9 September, 2018 05:00 GMT. Website operator notified: 9 September, 2018 05:00 GMT. Public report published [without any technical details]: 9 September, 2018 05:00 GMT. Vulnerability fixed: 8 December, 2018 19:35 GMT. Public disclosure: security researcher can delete the report before public disclosure; afterwards, the report cannot be deleted or modified; the researcher can also postpone public disclosure date as long as reasonably required to remediate the vulnerability