performaholiday.com XSS vulnerability

Vulnerable URL: http://performaholiday.com/home/index.php/admission-ticket/australia/13/entry?filter=...