28mall.com XSS vulnerability

Vulnerable URL: http://28mall.com/index.php?act=shipping=jsonlistid=15groupid=7=prompt/OPENBUGBOUNTY/...