app.tongbu.com XSS vulnerability

Vulnerable URL: http://app.tongbu.com/ajax/recommend?jsoncallback=prompt/OPENBUGBOUNTY/...