avalongcc.com XSS vulnerability

Vulnerable URL: https://www.avalongcc.com/avalondisplay.asp?param=1/-///'/"//--...