api.k3k.com XSS vulnerability

Vulnerable URL: http://api.k3k.com/match/queryresult.php?jsoncallback=prompt/OPENBUGBOUNTY/...