playadelcarmen.com XSS vulnerability

playadelcarmen.com XSS vulnerability. Open Bug Bounty ID OBB-699645. Affected Website: playadelcarmen.com. Vulnerable Application: Custom Code. Vulnerability Type: XSS (Cross Site Scripting). CVSSv3 Score: 6.1. Disclosure Standard: Coordinated Disclosure based on ISO 29147 guidelines. Remediation Guide: OWASP XSS Prevention Cheat Sheet. Vulnerable URL: https://www.playadelcarmen.com/search?q=%22%3E%3Cimg+src%3Dx+onerror%3Dprompt%281%29%3E. Coordinated Disclosure Timeline: Reported 19 November 2018. Verified 20 November 2018. Operator Notified 20 November 2018. No Technical Details Published: 20 November 2018. Vulnerability Fixed 24 December 2018. Public Disclosure: 19 December 2018