tudou.com XSS vulnerability

Vulnerable URL: http://www.tudou.com/tvp/alist.action?jsoncallback=prompt/OPENBUGBOUNTY/...