rrsd.k12.wi.us XSS vulnerability

rrsd.k12.wi.us XSS vulnerability. Affected website: rrsd.k12.wi.us, Vulnerable Application: Custom Code, Vulnerability Type: XSS (Cross Site Scripting) / CWE-79, CVSSv3 Score: 6.1 [CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N], Remediation Guide: OWASP XSS Prevention Cheat Sheet, Vulnerable URL: http://www.rrsd.k12.wi.us/staff-directory.cfm?dosearch=1&lastname;=">&firstname;=&positiontitle;=&groupid;=&maxrows;=50&sortby;=lastname&search;=Search. Coordinated Disclosure Timeline: Vulnerability Reported: 3 July, 2015 04:09 GMT, Vulnerability Verified: 3 July, 2015 04:12 GMT, Website Operator Notified: 3 July, 2015 04:12 GMT, Vulnerability Published: 3 July, 2015 04:12 GMT[without any technical details], Vulnerability Fixed: 14 March, 2018 23:40 GMT, Public Disclosure: 14 March, 2018 23:40 GM